[Vtigercrm-commits] [vtiger development] #4839: User ListView is not restricted to non-admin

[vtiger development]

#4839: User ListView is not restricted to non-admin
-----------------------+----------------------------------------------------
 Reporter:  prasad     |       Owner:  developer
     Type:  defect     |      Status:  new      
 Priority:  critical   |   Milestone:           
Component:  vtigercrm  |     Version:  5.0.4    
 Keywords:             |  
-----------------------+----------------------------------------------------
 Login as non-admin and visit the following url:
 index.php?action=ListView&module=Users&parenttab=Settings

 You get access to ListView of Users (but no record information!)
 Check the screen shot.

 But click on Roles (from left menu), you will see the message the access
 is restricted.

 How to reproduce:
 Use firefox and create a new non-admin user.
 After user creation you will get a listview page, right click on that page
 and select 'View This Page in IE' (You should have IEView extension
 installed)
 Now login in IE as non-admin user and you will be re-directed to that
 page.

 Let me know if you need more information.

 Regards,

 Prasad

-- 
Ticket URL: <http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4839>
vtiger development <http://trac.vtiger.com/>
vtigerCRM