Actions
Bug #27310
open
Bug #27211: Cannot remove all rights from a user who has a single role, from the User management GUI
User management API permissions in responses are empty when not updating them
Pull Request:
Severity:
Minor - inconvenience | misleading | easy workaround
UX impact:
User visibility:
Getting started - demo | first install | Technique editor and level 1 Techniques
Effort required:
Small
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No
Description
When updating a user with POST /usermanagement/update/<username>, the request could contain some permission (which is made optional with the parent issue #27211).
But when not updating the user permissions, we never return the current user's permissions in the JSON response but we always return an empty list (because the permissions field is always in the response and we need some value for it). This is not right, we need the users actual permissions in the file
No data to display
Actions