プロジェクト

全般

プロフィール

Vote #79300

完了

Irrelevant permission is required to access some tabs in project settings page

Admin Redmine さんが4年以上前に追加. 4年以上前に更新.

ステータス:
Closed
優先度:
通常
担当者:
-
カテゴリ:
Permissions and roles_17
対象バージョン:
開始日:
2022/05/09
期日:
進捗率:

0%

予定工数:
category_id:
17
version_id:
141
issue_org_id:
28693
author_id:
141725
assigned_to_id:
332
comments:
8
status_id:
5
tracker_id:
1
plus1:
0
affected_version:
closed_on:
affected_version_id:
106
ステータス-->[Closed]

説明

It is not clear why is necessary to give "Edit project" right to create new Forum and so let "Settings" tab to appears; in fact giving "Forum Manager" right do not let "new forum" command to appears.


journals

--------------------------------------------------------------------------------
I confirmed the problem in the current trunk r17328.

Users cannot see some tabs in "Settings" tab if they don't have "Edit project", "Manage members", Manage versions" or "Manage issue categories" permission. For example, to access "Forums" tab, users should have one of those permissions in addition to "Manage forum" permission. I think the behavior inconsistent and illogical. Please see the following table for details.

|_. Tab |_. Required permission(s) |
| Project | _Edit project_ |
| Members | _Manage members_ |
| Issue tracking | _Edit project_ |
| Versions | _Manage versions_ |
| Issue categories | _Manage issue categories_ |
| Repositories | _Manage repository_ AND (_Edit project_ OR _Manage members_ OR _Manage versions_ OR _Manage issue categories_) |
| Forums | _Manage forums_ AND (_Edit project_ OR _Manage members_ OR _Manage versions_ OR _Manage issue categories_) |
| Time tracking | _Manage project activities_ AND (_Edit project_ OR _Manage members_ OR _Manage versions_ OR _Manage issue categories_) |

--------------------------------------------------------------------------------
Here is a workaround for this issue.

<pre><code class="diff">
Index: lib/redmine.rb
===================================================================
--- lib/redmine.rb (revision 17328)
+++ lib/redmine.rb (working copy)
@@ -125,7 +125,7 @@
map.permission :log_time, {:timelog => [:new, :create]}, :require => :loggedin
map.permission :edit_time_entries, {:timelog => [:edit, :update, :destroy, :bulk_edit, :bulk_update]}, :require => :member
map.permission :edit_own_time_entries, {:timelog => [:edit, :update, :destroy,:bulk_edit, :bulk_update]}, :require => :loggedin
- map.permission :manage_project_activities, {:project_enumerations => [:update, :destroy]}, :require => :member
+ map.permission :manage_project_activities, {:projects => :settings, :project_enumerations => [:update, :destroy]}, :require => :member
end

map.project_module :news do |map|
@@ -163,7 +163,7 @@
map.permission :browse_repository, {:repositories => [:show, :browse, :entry, :raw, :annotate, :changes, :diff, :stats, :graph]}, :read => true
map.permission :commit_access, {}
map.permission :manage_related_issues, {:repositories => [:add_related_issue, :remove_related_issue]}
- map.permission :manage_repository, {:repositories => [:new, :create, :edit, :update, :committers, :destroy]}, :require => :member
+ map.permission :manage_repository, {:projects => :settings, :repositories => [:new, :create, :edit, :update, :committers, :destroy]}, :require => :member
end

map.project_module :boards do |map|
@@ -173,7 +173,7 @@
map.permission :edit_own_messages, {:messages => :edit, :attachments => :upload}, :require => :loggedin
map.permission :delete_messages, {:messages => :destroy}, :require => :member
map.permission :delete_own_messages, {:messages => :destroy}, :require => :loggedin
- map.permission :manage_boards, {:boards => [:new, :create, :edit, :update, :destroy]}, :require => :member
+ map.permission :manage_boards, {:projects => :settings, :boards => [:new, :create, :edit, :update, :destroy]}, :require => :member
end

map.project_module :calendar do |map|
</code></pre>
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
I wrote a test of code written by Go MAEDA (#28693#note-3).
This test code will test that project settings and tabs are displayed according to permissions.
--------------------------------------------------------------------------------
Setting target version to 3.3.8.
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
Committed. Thank you all for contributing to the Redmine project.
--------------------------------------------------------------------------------

他の形式にエクスポート: Atom PDF

いいね!0
いいね!0