Love it When you Fix a bug yourself

Creating groups and adding users to multiple groups
Works like a charm!!!

multiplegroups.JPG

By changing the sql as described in another thread?

Yup!!
So proud of myself.
Lol

To start a new thread was a bit confusing. But it’s great that it has a solution. Bartho, any chance of applying this fix?

Hello Mr. Drent,

I could not find the original topic. Could you help me out?

regards,
Bernhard Bernsmann

Sure mr. Bernsmann: http://www.scriptcase.net/forum/showthread.php?3967-Fixing-Issue-with-the-Group-Security-Bug&highlight=security

I already sent this to development
They said they would review

I am not holding my breath
I just copy an paste the select for max values
And the group by
And takes 2 minutes to fix manually

Kev

Thanks Albert and Kev for the feedback.

I have just asked for an update on the issue to our bugs team.

regards,
Bernhard Bernsmann

Hello guys,

I was informed by our bugs team that now instead of selecting multiple groups to a user, you can only choose one single group to a user.

I have also sent as a suggestion to our team (suggestion [at] scriptcase [dot] net) that the multiple selection should be enabled again and the issue fixed. I suggest you also do the same, the more the merrier.

regards,
Bernhard Bernsmann

What the hell?
Sooo instead of fixing an bug
They make the software less useable ???

This makes COMPLETE SENSE
We’re talking about a simple select statement

So help me if I can only select a single group
I will blow a freaking fuse

I wish there was another software out there

The support for this software is just terrible

Nothing is changing

[QUOTE=Kdriscoll;14154]What the hell?
Sooo instead of fixing an bug
They make the software less useable ???

This makes COMPLETE SENSE
We’re talking about a simple select statement

So help me if I can only select a single group
I will blow a freaking fuse

I wish there was another software out there

The support for this software is just terrible

Nothing is changing[/QUOTE]

Hello Mr. Kdriscoll,

Although it may seem in this case that choices were made to take the “easy” road, it actually wasn’t. If you have been following our forum and changelogs, you will realize that our team has been working on new features and fixes.

The motivation to only allow one group per user was that a user usually doesn’t participate on more than one single group. And that a user participating in more than one group could incur on internal security issues.

I myself said that a user should be able to participate on more than one group and sent this suggestion to our team. Now I’m asking you to do the same, as I said before, the more the merrier.

regards,
Bernhard Bernsmann

If your developers knew anything about RBAC
By the way that stands for Role Based Access Control
Any saying that users don’t USUALLY don’t belong to more than one group.
Again Who are they to say what is usual or not

If you want you can forward to your team of developers

I find this just another absolutely misguided decision

I wonder when this decision ws made. I reported this to be a bug months ago (around august in my memory) and it’s the main reason why I don’t use the default SC mechanism any more. At the university we run a lot of applications. PeopleSoft, Oracle and loads of others. All work with usergroups where users can belong to different groups. Simply because users can manage in different roles. A manager can be an employee of another manager. So he has two roles. If someone has the rights to config he/she has also the role of admin besides the standard role. Now people need to logon separately for each role. I really cannot see this as a ‘serious’ decision. It’s funny that after months I read that it works as designed…

And again NO response from anyone

The question of Bartho was that more users should complain:

I myself said that a user should be able to participate on more than one group and sent this suggestion to our team. Now I’m asking you to do the same, as I said before, the more the merrier.

I agree on your arguments, but it looks like we are the only two. As this can easily be fixed I would ask you to write the solution in a small piece and email it to me. We will add this fix to the faq on our open forum.

If I add my support, that will make it three.

As a demo module, I would consider security simplistic. To be called a usable module is to make all your other claims less believable.

If you limit it to one group per user, you eventually end up with each group having only one member. And it is pretty much impossible to tell who has access to what and a nightmare to maintain.

So… here is my support.

Tnx. In fact it’s a pretty simple sql addition. They only need to add a checkbox to allow multiple group membership or not afaik.

Well I downloaded and installed 7.
From what I can tell they changed the N-N configuration to a radio button.
I changed it back to a dbl select and changed the sql and all is right with multiple groups.

I really wonder…Why wouldnt you fix this… the sql is soooooo minimal to change

[QUOTE=aducom;14674]The question of Bartho was that more users should complain:

I agree on your arguments, but it looks like we are the only two. As this can easily be fixed I would ask you to write the solution in a small piece and email it to me. We will add this fix to the faq on our open forum.[/QUOTE]

I sent you a word document with the process to correct the issue for ver 6 and ver 7

Kevin

Where did you send it to? I haven’t seen it so far. You can email it to support at aducom dot com.