View individual group members does not work for outsiders

Created on 13 April 2023, over 1 year ago
Updated 22 May 2023, over 1 year ago

Problem/Motivation

The "view individual group members" permission does not work for group outsiders unless "administer group members" is also enabled.

Steps to reproduce

1) Create a new group type with default settings.
2) Check "view individual group members" permission for the Outsider (Authenticated user) role.
3) Create a group of the new type.
4) Log in or masquerade as a user without membership in the group.
5) Go to group/GID/members.

You should get "access denied."

Perhaps I'm missing the point of this permission but my use case requires that outsiders be able to see who is in each group, so if there's another way to accomplish this, I'm all ears.

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

πŸ’¬ Support request
Status

Fixed

Version

2.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States phl3tch

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024