[CONTINUUM-1889] Project group admin should not be able to move a project into a group he does not have access to

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2
• Fix Version/s: 1.2.1
• Component/s: Project Grouping
• Assignee: Emmanuel Venisse
• Reporter: Wendy Smoak
• Created: 19/Sep/08 09:50
• Updated: 25/Sep/08 23:27
• Resolved: 25/Sep/08 23:27

Description

On the editProjectGroup.action page, a project group admin is allowed to move a project into any other group, even if he does not have admin permissions there.

The "Move to Group" drop downs should only contain groups for which the current user is an admin, and moves to other groups should be prevented.