Project

General

Profile

Actions

Feature #17599

open

Allow users to edit issues without adding notes.

Added by Go MAEDA over 9 years ago. Updated almost 8 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Permissions and roles
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:

Description

Issue notes can be added even if the member's role does not include "Add notes" permission.

How to reproduce:
1. Add a user to a project as "Developer"
2. Revoke "Add notes" permission from the role "Developer"
3. The member can still add issue notes.


Related issues

Related to Redmine - Defect #35045: Mail handler bypasses add_issue_notes permissionClosedGo MAEDA

Actions
Actions #1

Updated by Toshi MARUYAMA over 9 years ago

  • Target version set to 2.6.0
Actions #2

Updated by Jean-Philippe Lang over 9 years ago

  • Tracker changed from Defect to Feature
  • Subject changed from Permission "Add notes" is not working to Allow users to edit issues without adding notes.
  • Target version changed from 2.6.0 to Candidate for next major release

The "Add notes" permission lets users add notes without editing the issue. But whenever a user is allowed to edit an issue, he is allowed to add notes by design.

Actions #3

Updated by Jaap de Haan almost 8 years ago

But whenever a user is allowed to edit an issue, he is allowed to add notes by design.

IMHO this is not a good design decision:

  • All systems I know (SBM, JIRA, ...) behave in another way: the feature of adding notes or attachments is something separate from the ticket itself (that others do it is a poor argument :-) I know)
  • The expectation of removing the "Add note" check box in the permissions is that there is no possibility to add notes. Still allowing this because of edit rights on the issue undermines this and makes it impossible to realize that use case. Rights for editing issues should not be include adding notes.

Or put more simply, why restrict the amount of possible use cases artificially?

I consider the "Add Notes" behavior should be changed too.

Actions #4

Updated by Holger Just almost 3 years ago

  • Related to Defect #35045: Mail handler bypasses add_issue_notes permission added
Actions

Also available in: Atom PDF