Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Group list block on person profile page doesn't respect security on group #2112

Closed
1 task done
KelleyLangkamp opened this issue Mar 30, 2017 · 2 comments
Closed
1 task done

Group list block on person profile page doesn't respect security on group #2112

KelleyLangkamp opened this issue Mar 30, 2017 · 2 comments
Assignees
@arranf
Labels
Status: Confirmed It's clear what the subject of the issue is about, and what the resolution should be. Type: Bug Confirmed bugs or reports that are very likely to be bugs.

Comments

@KelleyLangkamp
Copy link

Prerequisites

  • Put an X between the brackets on this line if you have done all of the following:

Description

The group list on the person profile shows group membership even when the users has been denied view for both the group itself and the group type. The user can't click on the group and get to the group viewer but they can see that the person belongs to the group.

I was expecting either deny view on the individual group or the group type to make the group not appear on the group list.

Versions

  • Rock Version: 6.2
  • Client Culture Setting en-us
@gladsonj gladsonj added Status: Confirmed It's clear what the subject of the issue is about, and what the resolution should be. and removed Status: Confirmed It's clear what the subject of the issue is about, and what the resolution should be. labels Mar 30, 2017
@gladsonj
Copy link

@KelleyLangkamp Could you please List the steps to Reproduce? I assume, there is a lack of clarity here.

@garrettjohnson garrettjohnson added Type: Bug Confirmed bugs or reports that are very likely to be bugs. Status: Confirmed It's clear what the subject of the issue is about, and what the resolution should be. labels Jul 13, 2017
@garrettjohnson
Copy link
Contributor

Steps to Reproduce

  1. Deny a user view access to a group
  2. Open groups tab on a profile as the user
  3. All Group Memberships are visible

Confirmed in 6.8

@arranf arranf self-assigned this Jul 13, 2017
@arranf arranf closed this as completed in 559669b Aug 30, 2017
azturner pushed a commit that referenced this issue Sep 5, 2017
@arranf @azturner
- Ensure GroupList block respects security. Fixes #2112
5abad8b 
# Conflicts:
#	RockWeb/Blocks/Groups/GroupList.ascx.cs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@arranf arranf

Labels
Status: Confirmed It's clear what the subject of the issue is about, and what the resolution should be. Type: Bug Confirmed bugs or reports that are very likely to be bugs.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@garrettjohnson @arranf @KelleyLangkamp @gladsonj