[OGo-Bugs][Bug 1981] enterprise access manager does not check for the ogo admin
bugs@opengroupware.org
bugs@opengroupware.org
Thu, 5 Jun 2008 14:01:38 +0200 (CEST)
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug
report.
http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1981
awilliam@whitemice.org changed:
What |Removed |Added
----------------------------------------------------------------------------
AssignedTo|qa@opengroupware.org |awilliam@whitemice.org
------- Additional Comments From sebastia@l00-bugdead-prods.de 2008-06-05 13:17 -------
>From Bugzilla Helper:
User-Agent: Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.7 (like Gecko) SUSE
Description of problem:
assume the follownig:
a company in ogo, and the only access right assigned to it is for all intranet, read write.
When using zogi, to search for that company in ogo, then it works, when using an ordinary account, that is a member of all intranet. But it does not find the company, when searching as ogo admin, which is not a member of all intranet.
I experienced the problem with zogi, here is the code in question:
criteria = [ { 'key' : 'name',
'value' : row[Company],
'expression' : 'EQUALS' } ]
print 'going to search for the enterprise'
result = server.zogi.searchForObjects('Enterprise', criteria, 0)
Version-Release number of selected component (if applicable):
How reproducible:
Always
Steps to Reproduce:
1.
2.
3.
Actual Results: when doing stuff as ogo admin, then regardless of ACL, it should always succeed.
Expected Results: ogoroot will not find a company, when he is not somehow mentioned in the ACL's to that company.
Additional info:
------- Additional Comments From awilliam@whitemice.org 2008-06-05 14:01 -------
LSQualifierSearchCommand does not respect super-user status.
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.