Defect #12718
closedUser with role without any worflow right for tracker can create issues
0%
Description
I created a role which has no status checked in worflow (would be enougg not to have the "new" in y-cordinate also) for a tracker.The user with has only this role in project.
How it works:
The user has the possibility to create a new issue on the tracker he has no right to do such transition.
Expected:
User withou role without the "new" to anywhere worflow transition in notz allowed to create issues. Better would be even if the user don't has the tracker in issue form dropdown, so you you don't let him fill out the form and then show a error message "forbidden" if he tries to save the issue.
Maybe the status "nowhere to new" is not mean to be part of the worflow and always possible? This would be inacepptable also. Why shall i allow any user to create issue on a tracker i only wanna allow special roles to create issues for
Related issues