Redmine

  end

  def show

    @journals = @issue.journals.find(:all, :include => [:user, :details], :order => "#{Journal.table_name}.created_on ASC")

    @journals.each_with_index {|j,i| j.indice = i+1}

    @journals.reverse! if User.current.wants_comments_in_reverse_order?

  after_save :create_journal

  # Returns true if usr or current user is allowed to view the issue

  end

  def after_initialize

    group_by_column.groupable

  end

    project_clauses = []

    if project && !@project.descendants.active.empty?

      ids = [project.id]

    elsif project

      project_clauses << "#{Project.table_name}.id = %d" % project.id

    end

    project_clauses.join(' AND ')

  end

    end if filters and valid?

  end

  # Returns the issue count

      roles = roles_for_project(project)

      return false unless roles

    elsif options[:global]

      # Admin users are always authorized

      # authorize if user has at least one role that has this permission

      roles = memberships.collect {|m| m.roles}.flatten.uniq

    else

      false

    end

# Permissions

Redmine::AccessControl.map do |map|

  map.permission :search_project, {:search => :index}, :public => true

  map.permission :add_project, {:projects => :add}, :require => :loggedin

  map.permission :edit_project, {:projects => [:settings, :edit]}, :require => :member

    # Issue categories

    map.permission :manage_categories, {:projects => [:settings, :add_issue_category], :issue_categories => [:edit, :destroy]}, :require => :member

    # Issues

                                  :issues => [:index, :changes, :show, :context_menu],

                                  :versions => [:show, :status_by],

                                  :queries => :index,

                                  :reports => :issue_report}

    map.permission :edit_issues, {:issues => [:edit, :reply, :bulk_edit, :update_form]}

    map.permission :manage_issue_relations, {:issue_relations => [:new, :destroy]}

    map.permission :add_issue_notes, {:issues => [:edit, :reply]}

  map.project_module :documents do |map|

    map.permission :manage_documents, {:documents => [:new, :edit, :destroy, :add_attachment]}, :require => :loggedin

  end

  map.project_module :files do |map|

    map.permission :manage_files, {:projects => :add_file}, :require => :loggedin

  end

  map.project_module :wiki do |map|

    map.permission :manage_wiki, {:wikis => [:edit, :destroy]}, :require => :member

    map.permission :rename_wiki_pages, {:wiki => :rename}, :require => :member

    map.permission :delete_wiki_pages, {:wiki => :destroy}, :require => :member

    map.permission :view_wiki_edits, :wiki => [:history, :diff, :annotate]

    map.permission :edit_wiki_pages, :wiki => [:edit, :preview, :add_attachment]

    map.permission :delete_wiki_pages_attachments, {}

  map.project_module :repository do |map|

    map.permission :manage_repository, {:repositories => [:edit, :committers, :destroy]}, :require => :member

    map.permission :commit_access, {}

  end

  map.project_module :boards do |map|

    map.permission :manage_boards, {:boards => [:new, :edit, :destroy]}, :require => :member

    map.permission :view_messages, {:boards => [:index, :show], :messages => [:show]}, :public => true

    map.permission :edit_messages, {:messages => :edit}, :require => :member

    map.permission :edit_own_messages, {:messages => :edit}, :require => :loggedin

    map.permission :delete_messages, {:messages => :destroy}, :require => :member

  category_id: 1

  description: Unable to print recipes

  tracker_id: 1

  author_id: 2

  status_id: 1

  start_date: <%= 1.day.ago.to_date.to_s(:db) %>

  category_id: 

  description: This is an issue of a private subproject of cookbook

  tracker_id: 1

  author_id: 2

  status_id: 1

  start_date: <%= Date.today.to_s(:db) %>

issues_007: 

  created_on: <%= 10.days.ago.to_date.to_s(:db) %>

  project_id: 1

  assigned_to_id: 

  author_id: 2

  status_id: 1

  role_id: 2

  member_id: 10

  inherited_from: 10

  project_id: 2

  user_id: 8

  mail_notification: false

    - :view_changesets

  position: 5

  id: 11

  lastname: B Team

  type: Group

  watchable_type: Issue

  watchable_id: 2

  user_id: 1

  def test_show_should_deny_member_access_without_permission

    Role.find(1).remove_permission!(:view_issues)

    @request.session[:user_id] = 2

    get :show, :id => 1

    assert_response 403

    assert_not_nil assigns(:issue)

  end

  def test_get_new

    @request.session[:user_id] = 2

    get :new, :project_id => 1, :tracker_id => 1

    assert issues.detect {|issue| !issue.project.is_public?}

  end

  def test_errors_full_messages_should_include_custom_fields_errors

    field = IssueCustomField.find_by_name('Database')

      user = User.find(9)

      Watcher.create!(:watchable => @issue, :user => user)

      Role.non_member.remove_permission!(:view_issues)

      assert Mailer.deliver_issue_add(@issue)

      assert !last_email.bcc.include?(user.mail)

    end