PUBLIC - Liferay Portal Community Edition
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-26940

Users without the ASSIGN_MEMBER permission can still assign users to an organization

    Details

    • Similar Issues:
      Show 4 results 

      Description

      Users without the ASSIGN_MEMBER permission can still assign users to an organization by using the JSON service. This may lead to increased entitlements for that user.

        Activity

        Hide
        Samuel Kong added a comment -

        The code for this ticket was committed under LPS-26887.

        Show
        Samuel Kong added a comment - The code for this ticket was committed under LPS-26887.

          People

          • Assignee:
            Samuel Kong
            Reporter:
            Samuel Kong
            Recent user:
            Esther Sanz
            Participants of an Issue:
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:
              Days since last comment:
              2 years, 48 weeks, 4 days ago

              Development

                Structure Helper Panel