Vote #63744
完了document listing shows on "my page" when viewing documents is disabled for the role.
開始日:
2008/08/12
期日:
進捗率:
0%
予定工数:
Redmineorg_URL:
category_id:
4
version_id:
2
issue_org_id:
1772
author_id:
1837
assigned_to_id:
0
comments:
1
status_id:
5
tracker_id:
1
plus1:
0
affected_version:
closed_on:
affected_version_id:
説明
user with role which has disabled viewing and managing documents for some project can see that project's document titles when he adds "documents" widget to his personal "my page" . after clicking on the document title,correct 403 not authorized page shows.
tested on redmine 0.7.2, 0.7.3 and current svn trunk - revision 1735. using ruby 1.8.6-26 on winxp,mysql 5.051b,rails 2.1.0 (freezed 2.0.2 in 0.7.2 and 0.7.3)
journals
Fixed in r1766. Thanks for pointing out.
--------------------------------------------------------------------------------
いいね!0