Uh oh!
There was an error while loading. Please reload this page.
fix(provisioning_api): Allow group details access for users with admin delegation - #53275
Conversation
provokateurin
commented
Jun 3, 2025
I don't get how the move from annotation to attribute should be responsible for this? Maybe you didn't read the entire commit when checking the git blame. |
nfebe
commented
Jun 3, 2025
Right, sorry for git-blaming your commit, the issue then is simply the use of the middleware |
provokateurin
left a comment
There was a problem hiding this comment.
I think adding #[AuthorizedAdminSetting(settings: Users::class)] should be enough.
…n delegation This fixes an issue where users with "Administration privileges → Users" could not access the groups details endpoint in the provisioning API, resulting in a 403 Forbidden error. There is a problem with adding the `AuthorizedAdminSetting` attribute (middleware) that only allows access to users with Sharing admin privileges. Users with "`Users` admin" privileges should also be able to access group details. Resolves: #52617 Signed-off-by: nfebe <fenn25.fn@gmail.com>
ca148d6 to
b647ca6Comparenfebe
commented
Jun 3, 2025
/backport to stable31 |
come-nc
commented
Aug 28, 2025
/backport to stable30 |
This fixes an issue where users with "Administration privileges → Users" could not access the groups details endpoint in the provisioning API, resulting in a 403 Forbidden error.
There is a problem with adding the
AuthorizedAdminSettingattribute (middleware) that only allows access to users with Sharing admin privileges.Users with "
Usersadmin" privileges should also be able to access group details.Resolves: #52617
Introduced in : #46815