[BUG] Elevated user privileges
-
- New Member
- Posts: 3
- Joined: Thu Jun 07, 2012 9:21 pm
[BUG] Elevated user privileges
I'm not sure if this was an issue introduced with MLS 3.6, but after I updated to this version, I created a new user for the newly called Primary Secretary and gave her access to "Organization" only. When logging in through that account, the user is given rights equivalent to an assistant clerk -- pretty much everything minus creating new users is available.
Has anyone else run into this? I'd like to get her set up so she can get going with the information she needs to do her calling, but I don't want to expose MLS wide open.
Has anyone else run into this? I'd like to get her set up so she can get going with the information she needs to do her calling, but I don't want to expose MLS wide open.
-
- New Member
- Posts: 3
- Joined: Thu Jun 07, 2012 9:21 pm
Re: [BUG] Elevated user privileges
I tried adding another user with a different calling and verified that this user was also given Admin privileges.
Has nobody else seen this anomaly? I'd like to resolve this issue so that every calling wont have access to everything in MLS. Is there any workaround?
Has nobody else seen this anomaly? I'd like to resolve this issue so that every calling wont have access to everything in MLS. Is there any workaround?
-
- Senior Member
- Posts: 1222
- Joined: Thu Dec 08, 2011 10:42 am
- Location: Emmett, Idaho
Re: [BUG] Elevated user privileges
If you go back and edit the privileges later does that fix the problem?alexjr181 wrote:Is there any workaround?
-
- New Member
- Posts: 3
- Joined: Thu Jun 07, 2012 9:21 pm
Re: [BUG] Elevated user privileges
Well the problem is actually that admin privileges are given even though "Organization" is the only thing checked. I've tried two different members with different callings, only checking "Organization" and both times I've logged in with those accounts they can see everything: callings, Home and Visiting Teaching, expenses etc.Gary_Miller wrote:If you go back and edit the privileges later does that fix the problem?alexjr181 wrote:Is there any workaround?
-
- Senior Member
- Posts: 1222
- Joined: Thu Dec 08, 2011 10:42 am
- Location: Emmett, Idaho
Re: [BUG] Elevated user privileges
Ok, however when you go and look at their user rights what is checked then?alexjr181 wrote:Well the problem is actually that admin privileges are given even though "Organization" is the only thing checked. I've tried two different members with different callings, only checking "Organization" and both times I've logged in with those accounts they can see everything: callings, Home and Visiting Teaching, expenses etc.Gary_Miller wrote:If you go back and edit the privileges later does that fix the problem?alexjr181 wrote:Is there any workaround?
It may only be a bug when you are first setting the privileges up. So the fix maybe to just go back in to the user file and reassign the privileges back to organization only.
-
- Community Administrator
- Posts: 34499
- Joined: Sat Jan 20, 2007 2:53 pm
- Location: U.S.
Re: [BUG] Elevated user privileges
Other then expenses, that sounds normal to me. Can that user go in and change someone else's password?alexjr181 wrote:I've tried two different members with different callings, only checking "Organization" and both times I've logged in with those accounts they can see everything: callings, Home and Visiting Teaching, expenses etc.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.
So we can better help you, please edit your Profile to include your general location.
So we can better help you, please edit your Profile to include your general location.
-
- Community Administrator
- Posts: 34499
- Joined: Sat Jan 20, 2007 2:53 pm
- Location: U.S.
Re: [BUG] Elevated user privileges
I tried this in a test database in 3.5.3 and then upgraded to 3.6. "Organization" does have more rights then one might expect. They can see MRNs and birthdates. But I didn't see where they could see finance, endowment status, temple recommend status, or priesthood.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.
So we can better help you, please edit your Profile to include your general location.
So we can better help you, please edit your Profile to include your general location.
-
- Senior Member
- Posts: 2649
- Joined: Sun May 09, 2010 9:16 pm
- Location: Washington, USA
Re: [BUG] Elevated user privileges
I noticed yesterday at the church when I went in to enter HT info, that I could see MLS features that have been unavailable since I was Ward Clerk (now HPGL). I don't suspect the current Ward Clerk of changing my permissions as he is not at that level with computer technology, but one of the Bishopric Councilors is.
I was curious as to what happened, but this thread may be an explaination, if the software update granted more priveleges to existing users. I will try to test it this week and report back to this forum if the answer is not found before then.
I was curious as to what happened, but this thread may be an explaination, if the software update granted more priveleges to existing users. I will try to test it this week and report back to this forum if the answer is not found before then.
-
- Church Employee
- Posts: 8
- Joined: Fri Sep 14, 2012 7:56 am
Re: [BUG] Elevated user privileges
alexjr181 ... what is your unit number?
-
- Church Employee
- Posts: 3025
- Joined: Mon Feb 09, 2009 4:55 pm
- Location: Riverton, Utah
Re: [BUG] Elevated user privileges
We're looking into these reports this afternoon and will hopefully have some answers tomorrow. Kent or I will post here when we've got some more definitive information.
Steve
Steve