Not a Bug Can Assign Users to Groups

[Carla Birch]

The permission for this setting does not work, with this unticked for group admins, the admin of the group can still add users to the group via the members tab and add users box.

 

[Truonglv]

Hi. Can you capture some permission which you defined? I testing but work fine.

 

[Carla Birch]

Sure, here is what i have done, i have the user "Test User" this user is an normal "Registered" user, the permissions for that user group our.

The Group admin permissions our:

Group Members:

This a a new test group the Test User made.

Test user fills in the box shown in above image to "Add People".

the user they added, it auto added as a member.

 

[Truonglv]

Is `Test User` owner of group?

 

[Carla Birch]

Yes they are the owner/admin of the group. And as you can see the group admin permissions are set so they can not assign users to the group, but in fact they can.

What means people are making groups and just adding everyone to them without asking.

 

[Truonglv]

If 'Test User' is OWNER of group so any permission can do. It not inherit from Member Group Permission.

 

[Carla Birch]

That really needs a permission for Owner then being added. Because like i say people are making groups and adding people to them without asking or any kind of checks.

 

[Truonglv]

them without asking or any kind of checks.

Carla BirchIt a missing an confirm when someone add you into group. I will add this in next release

 

[Carla Birch]

Right now the groups Owner is listed in groups has an admin, this misleads to thinking the admin permissions controls the actions.

I think a full set of permissions for Owner should be added to match that of admin and members.

Even adding an add confirm alert, that still means a owner can keep on trying to add a user, what will then keep sending them confirm alerts, what can be an pain if someone starts to spam trying to add someone.

 

[Truonglv]

It must edit more places. Hmm!