[CONTINUUM-1867] Project group admin should not be able to grant system-wide roles to himself

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2
• Fix Version/s: 1.2
• Component/s: Web - Security
• Assignee: Olivier Lamy
• Reporter: Wendy Smoak
• Created: 01/Sep/08 17:35
• Updated: 20/Sep/08 08:34
• Resolved: 18/Sep/08 03:27

Description

As a project group admin for a single group, I am able to edit my user account and grant any role up to and including system administrator.

A project group admin should be able to grant the roles for his own project group to other users. He should not be able to elevate his own permissions.

Issue Links

• relates to: CONTINUUM-1783 a project administrator is acting like a user administrator