Normal user can grant run rights on all applications to himself

[Dominik_Marti]

Hi,

I just discoverd an odd quirk in my EGroupWare installation
(14.1.20140903). When, as a normal user (i.e., not part of the admin
group, and without acl to run the admin application), I can open the
access panel in any application that supports acls and grant myself run
rights on all applications, including admin and so on. I can then log
out and back in and have all of a sudden access to e.g. creating groups
or users.

Is there something wrong with my installation, and how do I get rid of it?

Cheers,
Dominik

---

Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce.
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[Ralf_Becker_Stylite]

Hi Dominik,

I opened a ticket to track the issue and added you to it.

Ralf

Hi,

I just discoverd an odd quirk in my EGroupWare installation
(14.1.20140903). When, as a normal user (i.e., not part of the admin
group, and without acl to run the admin application), I can open the
access panel in any application that supports acls and grant myself run
rights on all applications, including admin and so on. I can then log
out and back in and have all of a sudden access to e.g. creating groups
or users.

Is there something wrong with my installation, and how do I get rid of it?

Cheers,
Dominik

–
Ralf Becker
Director Software Development

Stylite AG

Morschheimer Strasse 15 | Tel. +49 6352 70629 0
D-67292 Kirchheimbolanden | Fax. +49 6352 70629 30

Email: rb@stylite.de

www.stylite.de | www.egroupware.org

Managing Directors: Andre Keller | Ralf Becker | Gudrun Mueller
Chairman of the supervisory board: Prof. Dr. Birger Leon Kropshofer

VAT DE214280951 | Registered HRB 31158 Kaiserslautern Germany