Fix the permissions being used to manage group assignments

dtdesign · dtdesign · commit 973b622b0165 · 2026-04-22T15:49:05.000+02:00
See https://www.woltlab.com/community/thread/317753/
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/groups/assignment/DeleteAssignment.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/groups/assignment/DeleteAssignment.class.php
@@ -36,6 +36,6 @@ public function __invoke(ServerRequestInterface $request, array $variables): Res
 
     private function assertAssignmentCanBeDeleted(): void
     {
-        WCF::getSession()->checkPermissions(['admin.management.canManageCronjob']);
+        WCF::getSession()->checkPermissions(['admin.user.canManageGroupAssignment']);
     }
 }
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/groups/assignment/DisableAssignment.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/groups/assignment/DisableAssignment.class.php
@@ -37,7 +37,7 @@ public function __invoke(ServerRequestInterface $request, array $variables): Res
 
     private function assertAssignmentCanBeDisabled(UserGroupAssignment $assignment): void
     {
-        WCF::getSession()->checkPermissions(['admin.management.canManageCronjob']);
+        WCF::getSession()->checkPermissions(['admin.user.canManageGroupAssignment']);
 
         if ($assignment->isDisabled) {
             throw new PermissionDeniedException();
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/groups/assignment/EnableAssignment.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/groups/assignment/EnableAssignment.class.php
@@ -37,7 +37,7 @@ public function __invoke(ServerRequestInterface $request, array $variables): Res
 
     private function assertAssignmentCanBeEnabled(UserGroupAssignment $assignment): void
     {
-        WCF::getSession()->checkPermissions(['admin.management.canManageCronjob']);
+        WCF::getSession()->checkPermissions(['admin.user.canManageGroupAssignment']);
 
         if (!$assignment->isDisabled) {
             throw new PermissionDeniedException();

Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,6 @@ public function __invoke(ServerRequestInterface $request, array $variables): Res`
`36`	`36`
`37`	`37`	`private function assertAssignmentCanBeDeleted(): void`
`38`	`38`	`{`
`39`		`- WCF::getSession()->checkPermissions(['admin.management.canManageCronjob']);`
	`39`	`+ WCF::getSession()->checkPermissions(['admin.user.canManageGroupAssignment']);`
`40`	`40`	`}`
`41`	`41`	`}`
Original file line number	Diff line number	Diff line change
`@@ -37,7 +37,7 @@ public function __invoke(ServerRequestInterface $request, array $variables): Res`
`37`	`37`
`38`	`38`	`private function assertAssignmentCanBeDisabled(UserGroupAssignment $assignment): void`
`39`	`39`	`{`
`40`		`- WCF::getSession()->checkPermissions(['admin.management.canManageCronjob']);`
	`40`	`+ WCF::getSession()->checkPermissions(['admin.user.canManageGroupAssignment']);`
`41`	`41`
`42`	`42`	`if ($assignment->isDisabled) {`
`43`	`43`	`throw new PermissionDeniedException();`