Skip to content

Set user to not editable if the user is the current user. #3150

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
greenbonebot merged 6 commits into from
Sep 23, 2026
+7 −3
Merged

Set user to not editable if the user is the current user. #3150

Changes from 2 commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
b4a0938
Fix: Set user to not editable if the user is the current user.
jhelmold Sep 22, 2026
eb3f2f1
Merge branch 'main' into GEA-1971_Problem_saving_own_account_settings…
jhelmold Sep 22, 2026
adb4998
Use uuid instead of username for user identification.
jhelmold Sep 23, 2026
4e89c27
Merge branch 'GEA-1971_Problem_saving_own_account_settings_in_WebGUI'…
jhelmold Sep 23, 2026
26e22c0
Merge branch 'main' into GEA-1971_Problem_saving_own_account_settings…
ozgen Sep 23, 2026
320eba6
Merge branch 'main' into GEA-1971_Problem_saving_own_account_settings…
ozgen Sep 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 7 additions & 3 deletions src/gmp_get.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -349,9 +349,13 @@ send_get_common (const char *type, get_data_t *get, iterator_t *iterator,
&& (strcmp (get_iterator_owner_name (iterator),
current_credentials.username)
== 0))
/* Or the user is effectively the owner. */
|| acl_user_has_super (current_credentials.uuid,
get_iterator_owner (iterator))
/* Or the user is effectively the owner and the user is not the user
* of the resource if the resource is of type user. */
|| (acl_user_has_super (current_credentials.uuid,
get_iterator_owner (iterator))
&& (strcmp (type, "user")
|| strcmp (get_iterator_name (iterator), current_credentials.username)
Comment thread
ozgen marked this conversation as resolved.
Outdated
|| acl_user_is_super_admin (current_credentials.uuid)))
/* Or the user has Admin rights and the resource is a permission or a
* report format... */
|| (current_credentials.uuid
Expand Down
Loading