@mattab opened this issue on September 2nd 2015

As a Super User, currently I can set user access to websites that don't exist yet.

Reproduce: - go to: http://localhost.com/piwik-master/index.php?date=yesterday&module=API&format=json&method=UsersManager.setUserAccess&period=day&userLogin=user1&access=view&idSites=1,4,2,5&token_auth=xyz - when setting permission by setting idSites = non existent values (eg. 4,5) the user will get access to non existing sites. When these new sites will be added t,he user will have access already on these new websites. - Expected: it should not be possible to assign access to a website that does not yet exist.

reported by Haseeb

Powered by GitHub Issue Mirror