プロジェクト

全般

プロフィール

Vote #70512

未完了

Disable public project creation on a role basis

Admin Redmine さんが約4年前に追加. 約4年前に更新.

ステータス:
New
優先度:
通常
担当者:
-
カテゴリ:
Project settings_43
対象バージョン:
-
開始日:
2011/08/10
期日:
進捗率:

70%

予定工数:
category_id:
43
version_id:
0
issue_org_id:
9029
author_id:
36999
assigned_to_id:
1
comments:
13
status_id:
1
tracker_id:
2
plus1:
0
affected_version:
closed_on:
affected_version_id:
ステータス-->[New]

説明

This feature implies to :

  • Add a new role permission "Add public projects"
  • Hide / show the public checkbox in the create / edit project page.

journals

Our company needs this feature.
We are developing this feature and we will propose a patch very soon.
Hope this feature will please some users :-)

--------------------------------------------------------------------------------
Here is the patch with FR and EN translations.
Not testing included.
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
A fix has been added about the permission determination.
--------------------------------------------------------------------------------
Fixed a typo in the diff
--------------------------------------------------------------------------------
The patch works with Redmine V1.2.1
--------------------------------------------------------------------------------
This patch only hides the checkbox but does not check for permission when submitting the form.
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
Mizuki Ishikawa, Mitsuyoshi Kawabata and me made another patch to solve this issue.

We added a new permission called "Publish Project" which allows (un)publishing a project.
When you don't have that permission we just show the current state of the project as a label.

We could not find a proper CSS class for just displaying a label inside the setting tab, so we just wrote the style directly in the style attribute for now. If anyone has a better suggestion please tell us.

We added unit tests and a migration which will give the "Publish Project" permission to all Roles that had the "Add Project" or "Edit Project" permission until now to preserve the permissions of existing users.
--------------------------------------------------------------------------------
When allowing users to manage projects, system administrators need to worry about projects that should be private are not public.
Unintended disclosure of information can lead to major information leaks.

By adding this permission, only some trusted users can publish the project.
It will reassure many system administrators.
--------------------------------------------------------------------------------
I am not a big fan of adding new permission in the project setting.

I personally do not think there is much necessity of this feature for the following reasons:

* As long as admin enables "Login required", the project will never become world-accessible
* It complicates permission management. Two permissions "Edit project" and "Publish project" are required to change the project's "public" setting

--------------------------------------------------------------------------------
Go MAEDA wrote:
> I am not a big fan of adding new permission in the project setting.
>
> I personally do not think there is much necessity of this feature for the following reasons:
>
> * As long as admin enables "Login required", the project will never become world-accessible

I think there may be projects that have information that should not be shown to unauthorized users even if they are logged in (in some cases, employees of other companies are invited to Redmine).
I think we need a feature that restricts the project from being published by general users.

> * It complicates permission management. Two permissions "Edit project" and "Publish project" are required to change the project's "public" setting

How about adding a setting that "allows general users to publish the project" instead of permissions?
If this setting is turned off, only the administrator can publish the project.
--------------------------------------------------------------------------------


related_issues

duplicates,Closed,6913,An option to prevent making projects public

他の形式にエクスポート: Atom PDF

いいね!0
いいね!0