Users: Can not assign and unassign permissions to users unless you have "Settings (Users): Can create, edit and remove permission sets"

Description

Summary: When I follow the steps in T10787, I can edit all user information, but am not able to edit permissions.

https://foliotest.testrail.io/index.php?/tests/view/10787

Simple repro steps:

  1. Give a user the following permissions only:
    1) "Users: Can assign and unassign permissions to users"
    2) Users: Can edit user profile

  2. Log in as user to verify that it is possible to assign and unassign permissions to a user

Expected: Should be able to assign and unassign permissions to a user with these permissions

Actual: Can't assign/unassign permissions unless I also have "Settings (Users): Can create, edit and remove permission sets". "Settings (Users): Can create, edit and remove permission sets" should provide access to the Settings > Users > Permission sets feature only.

---------------------------
Steps to reproduce:

  1. Open BugFest site in a browser other than Chrome (FireFox, Safari, etc.) Don't use Chrome because it will be used to test user permissions.

  2. Login as "folio" user

  3. Go to Users app and find a user that you are using to test permissions

  4. Make sure that this user doesn't have any permissions applicable to Users app.

  5. Open Chrome browser and login to BugFest system with your testing user ID (do not use "folio" user). If you have BugFest browser window open in Chrome then logout and login as your testing user to refresh permissions settings.

  6. Verify that this user doesn't have access to Users app

  7. Switch back to the browser where you editing user permissions and add the following permissions:
    1) "Users: Can assign and unassign permissions to users"
    2) Users: Can view user profile

  8. Switch back to Chrome and perform logout/login as your testing user to refresh permissions settings.

  9. 1) Verify that you have access to Users app
    2) Verify that you can open user details screen
    3) Verify that you can add user permissions

  10. Switch back to the browser where you editing user permissions and remove "Users: Can assign and unassign permissions to users" permission

  11. Switch back to Chrome and perform logout/login as your testing user to refresh permissions settings.
    # 1) Verify that you have access to Users app
    2) Verify that you can browse user detail but can't see user permissions.

Expected result: See step 9

Actual result: I can edit all user information, but am not able to edit permissions.

*Additional info: *

  • I am able to edit permissions on a user only when I have "Settings (Users): Can create, edit and remove permission sets"

  • This bug exists in Q3.2 release/Chalmers production and doesn't seem to be an issue for them as it seems the ppl who can edit permissions on a user record are the same ppl who can create permission sets

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Attachments

3
  • 12 Mar 2020, 08:20 PM
  • 12 Mar 2020, 08:14 PM
  • 12 Mar 2020, 03:09 PM

Checklist

hide

TestRail: Results

Activity

Show:

Darcy Branchini March 12, 2020 at 10:26 PM

, I know I tried opening it before! slightly smiling face Okay, you're right though... I just opened it and it works.

Anna Melnyk March 12, 2020 at 10:17 PM

, have you tried to open User permissions accordion? After accordion is expanded the button "Add permission" will show if user has permissions:
1) "Users: Can assign and unassign permissions to users"
2) Users: Can edit user profile

Darcy Branchini March 12, 2020 at 8:15 PM
Edited

, I just tried it again, and it's not working for me on snapshot. Here are the screenshots:

Logged in as diku_admin, added the two permissions to user Ceasar's permissions:

Logged in as Ceasar, went to a user, cannot see edit options for user permissions:

Anna Melnyk March 12, 2020 at 3:11 PM
Edited

I already test it with graham user on snapshot with 2 permissions only, it works.


I was demo this:

Simple repro steps:
Give a user the following permissions only:
1) "Users: Can assign and unassign permissions to users"
2) Users: Can edit user profile
Log in as user to verify that it is possible to assign and unassign permissions to a user
Expected: Should be able to assign and unassign permissions to a user with these permissions

Actual: Can't assign/unassign permissions unless I also have "Settings (Users): Can create, edit and remove permission sets". "Settings (Users): Can create, edit and remove permission sets" should provide access to the Settings > Users > Permission sets feature only.

Darcy Branchini March 12, 2020 at 2:59 PM

, what instance did you demo this from today? I just tried to verify it and it didn't work for the user I setup with just these two permissions.

Done

Details

Assignee

Reporter

Tester Assignee

Priority

Story Points

Sprint

Development Team

Vega

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created December 17, 2019 at 1:41 PM
Updated March 12, 2020 at 10:26 PM
Resolved March 12, 2020 at 10:25 PM
TestRail: Cases
TestRail: Runs

Flag notifications