Project

General

Profile

Actions

Defect #12851

closed

"Parent task is invalid" while editing child issues by Role with restricted Issues Visibility

Added by Happy Mouse over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
High
Category:
Issues permissions
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Fixed
Affected version:

Description

What steps will reproduce the problem?

  1. create Role with Issues Visibility = "Issues created by or assigned to the user" and "Manage subtasks" permission
  2. create some User account with that Role for a project
  3. create parent issue, not created or assigned to that User (so User will not be able to access it)
  4. create child issue, assigned to that User (so User will be able to access it)
  5. log in to the User account
  6. try to edit the child issue (i.e. simply changing its Status)

What is the expected output?

User should be able to edit the issue, as long as its parent task id is not modified.

What do you see instead?

"Parent task is invalid" error message.

Possible workaround

Remove "Manage subtasks" permission.
Unfortunately, this will also prevent User from creating child issues to his own parent issues.
But "Related issues" is not affected by this bug, so it can be used instead of child issues.

Environment

Redmine version                          2.2.1.stable
Ruby version 1.9.3 (i686-linux)
Rails version 3.2.11
Environment production
Database adapter Mysql2
Redmine plugins: no plugin installed
Actions

Also available in: Atom PDF