Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Enter time for other user requires permission in all groups #980
When a "proxy" user has permission to enter time for another user the proxy should only need ki_timesheets-otherEntry-ownGroup-* permission for that user's group.
Realistically if a proxy user has permission to add time entries for any of the joint groups of the user it should probably be able to create time entries for the other user.
The code requires the "proxy" user to have that permission for all groups that they and the user are a member of at the same time.
Steps to reproduce
Create three groups for the user and the proxy user. Assign a responsibility group to one of the shared groups to the proxy user where the permission is ki_timesheets-otherEntry-ownGroup-Add.
Check whether the proxy can create a time entry for the user - should fail
Assign the responsibility group with a permission of ki_timesheets-otherEntry-ownGroup-Add to all groups shared by the users - adding a time entry should work
Reproducable on demo.kimai.org? [yes|no]
Kimai version [for example: dev 184.108.40.2069|github master|github develop]
v220.127.116.115 and 1.1.0
Relevant log entries from log file (debug tab or temporary/logfile.txt)