Closed Bug 634177 Opened 14 years ago Closed 14 years ago

Impersonate with/without administrative privilage

Categories

(Bugzilla :: Bugzilla-General, defect)

Product:
Bugzilla
Component:
Bugzilla-General
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: bhabesh, Unassigned)

Details

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.1) Build Identifier: 3.4.5 I have one scenario : ---------------------------- 1.Please consider four different users - A, U1,U2,U3. 2.U1,U2,U3 are normal users and A is an administrator. 3.U3 act as default assignee. 4.U1,U2 & U3 are not part of 'editbugs' group. 5.'A' turned the 'bz_sudoers' bit on for 'U3'. 6.'A' likes that 'U1' and 'U2' should impersonate 'U3' 7.'A' does not like to give admin right to others or let them in to 'editusers' group. ----------------------- Observation ---------------------- It is observed that U1 & U3 does not get opportunity to impersonate U3 (because of admin/edituser rights). but using the following url they able to impersonate U3 http://bugzilla/relogin.cgi?action=prepare-sudo&target_login=u3%40test.com ------------------------------- Requirement ------------------------------- 1. Way to impersonate user with Administrator's approval 2. Both the users (e.g. U1 and U3) should not be part of Administrator Reproducible: Always
One appology : Please consider the url and other data mentioned is functional at local network but fair enough to place the issue.
You can already impersonate people without being in the editusers group. You only have to be in the bz_sudoers group. The link is at Preferences > Permissions (see "impersonate other users" on that page).
Status: UNCONFIRMED → RESOLVED
Closed: 14 years ago
Resolution: --- → WORKSFORME
First of all Thanks. It solves most of the issue. But still one thing: he get's list of users to impersonate at preference option. I think it would be better if he get's list of limited users (set by administrator) to whome he is eligible to impersonate. (In reply to comment #2) > You can already impersonate people without being in the editusers group. You > only have to be in the bz_sudoers group. The link is at Preferences > > Permissions (see "impersonate other users" on that page).
You need to log in before you can comment on or make changes to this bug.