delete user from bucket needs separate permission from purge user
Bug #1931869 reported by
Lindsay Stratton
This bug affects 9 people
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Evergreen |
New
|
Wishlist
|
Unassigned | ||
Bug Description
There should be separate permissions for deleting user records - as from a User Bucket > Delete all users and purging user records - as from Patron Account > Other > Completely Purge Account.
Deleting users from a bucket only flips the "deleted" flag from true to false, and allows the action to be undone.
Both appear to use the single permission DELETE_USER but have very different outcomes.
tested in 3.6.3
| tags: | added: buckets-user patron permissions |
| Changed in evergreen: | |
| importance: | Undecided → Wishlist |
Revision history for this message
| Lindsay Stratton (lstratton) wrote | #1 |
To post a comment you must log in.
Noting this related bug - https:/