I'm deeply confused by the global permissions screen, and the documentation on Setting_global_permissions_for_a_user has left me no wiser.

I administer our local LimeSurvey installation, and we have about 100 users (which I understand LimeSurvey confusingly calls "administrators" even though they're not: they're survey owners — the [super]administrator is me.).

A user called me to say she had discovered she could edit another user's survey, and it appears that this is the default: by default every user has global read/write access to every survey on the system.

Is that correct? It seems to be a rather insecure way of working.

Can someone post the correct settings for the "Survey" permission that lets a new user have read/write permission on their own surveys and not on anyone else's? Is this possible?

LimeSurvey version?

Version 2.06+ Build 151215

...by default every user has global read/write access to every survey on the system.

Not correct, by default new survey administrators have no global permissions, you need to add them after creating the administrator (user).

If you want them to only add and see their own surveys, don't give them View/read rights for surveys.

If I understand this,

1. "View/Read" means "View/read other people's surveys"

2. "Create" means "Create, view, read, edit, update, delete your own surveys only"

Is that correct?

Correct.

Old

Surveys

New

Permission to create surveys (for which all permissions are automatically given) and view, update and delete surveys from other users

Does anyone know what version the definition of this setting changed?



It has caused a lot of confusion when we went from 2.05+ Build 140902 to 2.71.1- as users who previously did not have access to other peoples survey's suddenly had access

Or was it not behaving correctly in 2.05 and later patched?

Bug in 2.05, fixed after.

Else read/update Permission settings are not used.