Comment 5 for bug 1662911

Revision history for this message
Lance Bragstad (lbragstad) wrote :

In the event a deployment allows users to update their own user attributes, would we expect an administrator to clean up a rogue assignment if a user provides a project ID they shouldn't have access to?