?
avatar renekreijveld
renekreijveld
20 Jan 2017

Steps to reproduce the issue

Go to the Joomla user manager and click New to create a new user.
On the tab Account Details input all required information.
On the tab Assigned User Groups uncheck all groups, so no group is checked.
Click Save & Close.
The user is now created with no usergroup assigned to the account.

Expected result

When creating a new user at least one selected usergroup should be required.

Actual result

A user can be created with no usergroup assigned to the account.

System information (as much as possible)

Additional comments

This should not be possible. The result could be that the user receives an email with the account details and the user could even login into the website. But as the account is not assigned to any group, the user cannot do anything, possibly not even logout or edit the profile.

Votes

# of Users Experiencing Issue
1/1
Average Importance Score
3.00

avatar renekreijveld renekreijveld - open - 20 Jan 2017
avatar joomla-cms-bot joomla-cms-bot - labeled - 20 Jan 2017
avatar renekreijveld renekreijveld - change - 20 Jan 2017
Title
Users can be registered without assigned usergroup
Users can be registered with no usergroup
avatar renekreijveld renekreijveld - edited - 20 Jan 2017
avatar renekreijveld renekreijveld - change - 20 Jan 2017
The description was changed
Title
Users can be registered with no usergroup
Users can be registered without assigned usergroup
avatar renekreijveld renekreijveld - change - 20 Jan 2017
The description was changed
avatar renekreijveld renekreijveld - edited - 20 Jan 2017
avatar renekreijveld
renekreijveld - comment - 20 Jan 2017

Also tested on Joomla 3.7 Alpha 2 a user can be created without a group assigned.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/13653.

avatar rdeutz rdeutz - change - 20 Jan 2017
Labels Added: ?
avatar rdeutz rdeutz - labeled - 20 Jan 2017
avatar joomdonation
joomdonation - comment - 20 Jan 2017

What should be right behavior? Throw warning and prevent the account being created or assign the new user to default user group configured in com_users options?

avatar renekreijveld
renekreijveld - comment - 20 Jan 2017

Throw warning and prevent the account being created. The same as if no username was entered.
For some reason the administrator unchecked all groups. By showing an warning the administrator can select the right usergroup(s).


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/13653.

avatar joomdonation
joomdonation - comment - 20 Jan 2017

OK. I made the PR #13656 to fix it. Please help testing to get the issue fixed

avatar renekreijveld
renekreijveld - comment - 20 Jan 2017

Tested succesfully!


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/13653.

avatar Bakual Bakual - close - 20 Jan 2017
avatar Bakual
Bakual - comment - 20 Jan 2017

Closing as we have a PR

avatar Bakual Bakual - change - 20 Jan 2017
The description was changed
Title
Users can be registered with no usergroup
Users can be registered without assigned usergroup
Status New Closed
Closed_Date 0000-00-00 00:00:00 2017-01-20 12:52:25
Closed_By Bakual
avatar zero-24 zero-24 - change - 16 Oct 2017
Labels Removed: ?
avatar zero-24 zero-24 - unlabeled - 16 Oct 2017

Add a Comment

Login with GitHub to post a comment