A group member can delete other members even group manager from the group

[faridul.alam]

Hi Everyone,

Im currently using the CE version of the passbolt. Im bit wonder with 1 issue. Im not sure if tis a bug, missing feature or something that i missed.

Im trying control the password access in the combination of folders and groups. Different group should have access to the different folders. That works fine.

In a group I can assign different role like Group Manager, Member. What I can see that Only the group manager can add new members, which make sense. A group member can not add new members, thats also fine. But im not getting it why a group member is allows to delete users from group!! even he can delete the group manager from the group!!

Is there anything that im missing?

[cedric]

Hello @faridul.alam,

Does this member is also an administrator of passbolt?

In that case it would be expected that this user can also remove users from a group or elect another user as group manager.

[max]

A clarification: Administrators can only add users to groups if they themselves are members of that group

[faridul.alam]

No, my role is “User” and im not the Group Manager.

[faridul.alam]

Im a member of the group:

[faridul.alam]

but I cannot add but remove the user:

[gyaresu]

Hi Farid,
A user should not have the elipses (three dots) when you hover your mouse over the group name.
A Member of a group can see on a resource (password) who it’s also shared with.
A user/admin of Passbolt is different to a Group Manager/Member of a group.
I think that might be where the confusion is(?)
Can you confirm?

cheers
gareth

[faridul.alam]

I can confirm that,

• I don’t have three dots when I hover my mouse pointer over the group name.
• Yes, as a member of the group I can see the shared paaawords
• Yes, my user is a normal user in the passbolt and in the group I am only a member not the group manager
• Im have the latest update of CE version

Any idea, whats going on?

[Vivien]

Hi @faridul.alam,
If you click on the save button after deleting a group member, you’ll see that it is not authorized.

[faridul.alam]

@Vivien You are right. Even though I have option to delete but at the end its not allowing me to delete. Would be nice not to have delete option in the first palce.

[Vivien]

You’re right. With passbolt V5 the inline edit button inside the right sidebar will be removed, so you won’t be able to see the “Edit group” dialog.