Editing user permissions copies team permissions directly to the user. #758
Description
Originally reported on Google Code with ID 462
What steps will reproduce the problem?
1. Create a user with no repository permissions
2. Create a team and add the user to that team as well as set permissions to a repository.
3. Edit the user settings and click save (no changes are required)
4. go back in and edit the user and view the access permissions
What is the expected output? What do you see instead?
The access permissions under "mutable" tab should be empty, but instead shows the repositories
defined on the team ("effective" tab).
What version of the product are you using? On what operating system?
1.6.0
Please provide any additional information below.
It appears that the "Effective" tab controls are setup to be posted with the form submissions
(which they should not be) thus causing those entries to be added directly to the users
permissions. This can cause issues if you later revoke permissions from a user via
team membership, as the permissions were copied locally.
Reported by [email protected] on 2014-07-14 16:47:44