duplicate entries allowed in permissions table

[esskayesss]

as shown in the screenshot,
I have noticed that the application allows for duplicate entries in the permissions table. For example, as a superuser, I can add multiple superuser permissions for myself. This behavior can lead to confusion and potential security issues.

Steps to reproduce

1. Log in as a superuser
2. Add a new superuser permission for yourself
3. Verify that the new permission is added successfully
4. Add another superuser permission for yourself with the same recipient ID
5. Verify that the new permission is added successfully, creating a duplicate entry

Expected behavior

The application should prevent duplicate entries in the permissions table to ensure data integrity and prevent potential security issues.

[crazyscientist]

Thank you for reporting this 🙂

There is already a unique-constraint in place, but apparently it does not have the intended effect when obj_type and obj_id are null.