owner can't list it's users and user owned can't doesn't have permissions to change their data

Description

User only get's the user he owned with USER_CREATE_PERMISSION or USER_ADMIN_PERMISSION (see MCRUserServlet l474 ff), but he should get this list everytime.

Also user owned can never change their data (see MCRUserServlet l241 ff), but that should be possible. We have another option to prevent data to be changed from their users.

Environment

None

Assignee

René Adler

Reporter

Kathleen Neumann

Labels

None

URL

None

External issue ID

None

Time tracking

0m

Components

Fix versions

Affects versions

Priority

High
Configure