-
Notifications
You must be signed in to change notification settings - Fork 420
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Permission denied for specific Action when two groups are assigned to user #442
Comments
@Nikhil13x yes, it is expected behaviour. |
@KrzysztofPajak Understood. But the logic at permissionSystemName level works in the other way. If the checkbox is selected for any groups assigned to the user, it allows access. |
@Nikhil13x you have right, it can be a little confusing. |
A user is assigned with two groups.
Group 1 - Administrator with all permissions and their actions enabled
Group 2 - TestGroup - with one action unselected (Admin Area.Manage Products -> "List")
In this case, the user is not allowed to "List" the products, even if the permissions is assigned via one group. The deny rule takes precedence.
Is this expected behaviour?
The text was updated successfully, but these errors were encountered: