Skip to content

A user with permission 0 in ACL can delete data. #4265

@Li-Siyuan

Description

@Li-Siyuan

After set a user's ACL permission to '0', the user can't do query and write comand in web API, but he can delete data.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/aclRelated to Access Control Listskind/bugSomething is broken.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions