Project

General

Profile

Restricting Task Visibility to Author, Assignee, and Custom Field (Country Manager)

Added by Suleyman Serkan Yildiz 10 months ago

Hello Redmine community,

I have encountered an issue for which I need your assistance. I am using Redmine, and I have set up a custom tracker type. Within this tracker type, I have a custom field named "Country Manager," which is of type "user."

Here is my current scenario: Any staff member can create tasks in this tracker type, and these tasks are visible to the assigned person (Assignee) and the person who created the task (Author). However, I have a specific requirement: I want both the Author, the Assignee, and the user specified in the "Country Manager" custom field to be able to see the task. At the same time, I want to ensure that other users with the "Country Manager" role cannot see tasks assigned to other "Country Managers."

How can I achieve this configuration? Is there a way to set up permissions or use another method to enable visibility for the Author, Assignee, and the specific "Country Manager" while restricting access for other "Country Managers"?

I would greatly appreciate any suggestions or guidance you can provide. Thank you!

Best regards,

-----
Environment:
Redmine version 5.0.5.stable
Ruby version 3.0.2-p107 (2021-07-07) [x86_64-linux-gnu]
Rails version 6.1.7.2
Environment production
Database adapter Mysql2
Mailer queue ActiveJob::QueueAdapters::AsyncAdapter
Mailer delivery smtp
Redmine settings:
Redmine theme A1 (includes JavaScript)
SCM:
Git 2.34.1
Filesystem
Redmine plugins:
redmine_agile 1.6.5
redmine_budgets 1.0.4
redmine_checklists 3.1.22
redmine_cms 1.2.4
redmine_contacts 4.3.7
redmine_contacts_helpdesk 4.2.1
redmine_contacts_invoices 4.2.7
redmine_drive 1.2.0
redmine_finance 2.1.8
redmine_people 1.6.3
redmine_products 2.1.5
redmine_questions 1.0.4
redmine_reporter 2.0.3
redmine_resources 1.0.8
redmine_zenedit 2.0.4
redmineup_tags 2.0.13
----


Replies (2)

RE: Restricting Task Visibility to Author, Assignee, and Custom Field (Country Manager) - Added by C S 10 months ago

As you probably know, authorization is controlled via “role management”. In a role you can control whether a ticket is visible with the tracker X or not...
Therefore, I don't see a useful solution for your scenario - the control/selection needs to be moved from the custom field to a higher level, namely the tracker. You can copy created trackers and then customize them...

RE: Restricting Task Visibility to Author, Assignee, and Custom Field (Country Manager) - Added by Suleyman Serkan Yildiz 10 months ago

Thank you for your response. However, as you've mentioned, the solution you provided doesn't quite meet our exact needs. Is it possible to address this requirement by writing a custom patch or developing a plugin?

    (1-2/2)