Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-8103

Logged in user can change permissions on a plan but doesn't have right for it

XMLWordPrintable

      Problem found on: https://gdansk.bamboo2.atlassian.com

      1. Log in to: https://gdansk.bamboo2.atlassian.com
      2. Goto: https://gdansk.bamboo2.atlassian.com/chain/admin/config/editChainPermissions.action?buildKey=ACC-DPL&saved=true
      3. Logged in user is not on a Admin list but can change any permission.
      (for example can change add Logged in users to Admin rights permission and click save)

      See attached screenshoot

        1. bamboo_some_security_issue.png
          bamboo_some_security_issue.png
          180 kB

              Unassigned Unassigned
              pmaruszak Piotr Maruszak
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: