Redmine users able to create new issues in Projects they are not members of

Added by Mark Wintch over 4 years ago

This is my Redmine environment:

  Redmine version                3.3.0.stable
  Ruby version                   2.1.8-p440 (2015-12-16) [x64-mingw32]
  Rails version                  4.2.6
  Environment                    production
  Database adapter               SQLServer
Redmine plugins:
  redmine_agile                  1.4.1

I may be missing something simple, but here is my issue:

I have user accounts that are divided among different projects within Redmine.
All of my projects are public and I allow all members to see all of the projects.
A user can go into a project they are not a member of and create new issues in there.

They cannot edit issues, but I would rather them not even be able to create issues if they are not a member of the project.

Should this be a feature request, has it been addressed somewhere else, or am I missing something?

Thank you!


Capture.JPG - Issue tracking (42.6 KB)