feat: adding a note explaining userroles available

Open dayures opened this issue 9 months ago • 1 comments

Based on https://community.dhis2.org/t/user-cannot-access-roles-when-creating-another-user/2984/2 from @larshelge

Mar 21 '25 07:03 dayures

@jason-p-pickering what do you think about adding this line at the beginning? "By default, to prevent security issues, users are not be able to give away their own roles. Users should only be able to grant other users roles that are a subset of their own."

Apr 08 '25 14:04 dayures