Reservable Items should only be seeable if Item is managed or owned by group
Opened this issue · 0 comments
Code of Conduct
- I agree to follow this project's Code of Conduct
Is there an existing issue for this?
- I have searched the existing issues
Version
11-RC5
Bug description
Hi,
With the added functionality of being able to create new asset types in glpi11 we would want to use it for reservations of meeting rooms but we dont want these reservations to be viewable by all.
I created a profile with in the assistance tab 'See hardware of my groups' enabled
They also have 'Make a reservation' as allowed but no 'read' permissions
It seems like this would mean that the user can only see the reservable items which are assigned to them or a group they are in. But in fact they can see all the reservable Items. I dont know if this is a bug or a feature?
The intended idea is:
We give a Helpdesk user this helpdesk profile and assign it to all the groups it should be able to create tickets for.
They can see only the forms that are available for their groups -> This works
They should only be able to reserve Items that are assigned to their groups or user. -> This is faulty (they see all reservable items)
Or is there a better way to manage who can reserve what items?
Kind regards
Relevant log output
Page URL
No response
Steps To reproduce
No response
Your GLPI setup information
No response
Anything else?
No response