zikula/core — Issue #168: incorrect permission used in Groups_Api_User::getall
Author: tfotis
Created: 2011-11-18 12:54:00+00:00
State: open

Groups_Api_User::getall doesn't take into account any permissions rule you might have created for a group(s).

The correct permission to use is 'Groups::' for component and 'Group ID::' for instance. But as you can see here https://github.com/zikula/core/blob/release-1.3/src/system/Groups/lib/Groups/Api/User.php#L52 it is used 'Group Name::Group GID' instead.

So the permfilter variable should be

```php
$permFilter = array(array('realm' => 0,
'component_left' => 'Groups',
'instance_left' => 'gid',
'level' => ACCESS_READ));
```