This repository has been archived by the owner on Mar 19, 2024. It is now read-only.
[Bug] When creating role, user can select roles that they cannot assign #183
Labels
bug
Something isn't working
Describe the bug
A user should only be able to assign permissions to other users that are same level or lower than they have themselves. This prevents that a regular user can create a new role with more permissions and thereby elevate their own permissions.
This is currently not the case: see screenshots below, where a user can assign global permissions that they do not have themselves.
Expected behavior
In the create role component, a user can only tick boxes that they are allowed to assign
Screenshots
Top: which permissions the logged-in user (with role 'Collaboration admin') has
Bottom: which permissions they can assign
The text was updated successfully, but these errors were encountered: