Vote #78456
完了Bypass Tracker role-based permissions when copying issues
開始日:
2022/05/09
期日:
進捗率:
0%
予定工数:
Redmineorg_URL:
category_id:
23
version_id:
129
issue_org_id:
25791
author_id:
221347
assigned_to_id:
1
comments:
3
status_id:
5
tracker_id:
1
plus1:
0
affected_version:
closed_on:
affected_version_id:
123
説明
Not sure if intended: We use the permission settings for our roles. However, our Developer role is able to create an issue that the role does not have permission to create. This was done by Copying said issue and not changing the Tracker field. By leaving the Tracker field blank, the user is able to create an issue that bypasses the role's permissions.
journals
--------------------------------------------------------------------------------
Fixed in r16569.
--------------------------------------------------------------------------------
Tracker role-based permissions are not implemented in 3.2.
--------------------------------------------------------------------------------
いいね!0