Actions
Defect #14239
closedError 403 when trying to edit custom query
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Issues
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Fixed
Affected version:
Description
I get an error 403 when I try to edit a custom query. How to reproduce:
1) login as admin
2) create a custom query
3) query settings: "Public" + "For all projects"
4) save query
5) login as non admin user and manager of a project
6) edit the custom query. You will get an error 403 with warning "You are not authorized to access this page."
Tested on Redmine 2.3.1.stable.11941, no plugins.
Related issues
Updated by Toshi MARUYAMA about 10 years ago
- Related to Defect #17669: Non admin users can't modify public queries for all project added
Updated by Marius BĂLTEANU over 6 years ago
- Related to Defect #28264: Global and public custom queries are shown as editable to non administrators in projects added
Updated by Marius BĂLTEANU over 6 years ago
- Status changed from New to Closed
- Resolution set to Fixed
I'm considering this defect as fixed because the Edit/Delete buttons are no longer available to users without required permissions (fixed in #28264).
Actions