Feature #11718
closed
If you add a watcher to an issue, they should have rights to view it.
0%
Description
Hey Guys and Gals,
Redmine is awesome! I have been using it for a while and I have a slight mod. My issue is explained best by example:
- Bob is a user
- Bob only has permissions to see his issues or issues that have been assigned to him
- I want to add Bob as a watcher to an issue so that he may see it (would be nice if he could also add comments/updates)
- If I add Bob as a watcher, he does not see it because the issue is not assigned to him and he is not the creator
My fix is attached in the patch. This may not suite everyone but I thought I would share and ask for feedback.
Would people find this useful?
Files
Related issues
Updated by William Roush about 12 years ago
+1, though I think there is a related ticket on this.
Updated by Jean-Philippe Lang about 12 years ago
- Category set to Issues permissions
Updated by fangzheng (方正) about 12 years ago
Could it cause some rights issue?
I'm a developer of project A, and Bob is a developer of project B.
We should only see our respective projects, for some reasons.
Then I add Bob as a watcher to an issue of my project A (on purpose or not). If he has permissions to see the issue, he will also have the permissions of my project A. That's dangerous, I think...
Please let me know if I misunderstand. Thanks!
Updated by
Updated by Toshi MARUYAMA over 10 years ago
- Related to Feature #8488: Create an 'Involve' mechanism to private issues added
Updated by Toshi MARUYAMA over 10 years ago
- Related to deleted (Feature #8488: Create an 'Involve' mechanism to private issues)
Updated by Toshi MARUYAMA over 10 years ago
- Status changed from New to Closed
- Resolution set to Duplicate
Duplicate with #8488.
Updated by Toshi MARUYAMA over 10 years ago
- Is duplicate of Feature #8488: Create an 'Involve' mechanism to private issues added