Users without the ASSIGN_MEMBER permission can still assign users to an organization

Description

Users without the ASSIGN_MEMBER permission can still assign users to an organization by using the JSON service. This may lead to increased entitlements for that user.

Activity

Show:

Samuel Kong April 24, 2012 at 7:27 AM

The code for this ticket was committed under .

Fixed

Details

Assignee

Reporter

Components

Priority

Zendesk Support

Created April 24, 2012 at 7:24 AM
Updated June 24, 2023 at 3:53 PM
Resolved April 25, 2012 at 12:28 AM
Loading...