[ 
http://jira.codehaus.org/browse/CONTINUUM-1794?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Brett Porter updated CONTINUUM-1794:
------------------------------------

         Priority: Critical  (was: Major)
      Description: 
(unconfirmed)

in CONTINUUM-1659 it was reported that a project admin can see roles of other 
projects even if not a full admin

  was:This may have since been fixed, but we're seeing in 1.1-beta-3 that if a 
user with project admin rights tries to assign a role in their project to 
another user, they get an exception about ModelRole not being able to be cast 
to Role

    Fix Version/s:     (was: 1.2)
                   1.3

> project admin can assign another project's roles to users
> ---------------------------------------------------------
>
>                 Key: CONTINUUM-1794
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1794
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - Security
>            Reporter: Brett Porter
>            Priority: Critical
>             Fix For: 1.3
>
>
> (unconfirmed)
> in CONTINUUM-1659 it was reported that a project admin can see roles of other 
> projects even if not a full admin

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to