Feature #17599
open
Allow users to edit issues without adding notes.
Added by Go MAEDA over 10 years ago.
Updated over 8 years ago.
Category:
Permissions and roles
Description
Issue notes can be added even if the member's role does not include "Add notes" permission.
How to reproduce:
1. Add a user to a project as "Developer"
2. Revoke "Add notes" permission from the role "Developer"
3. The member can still add issue notes.
- Target version set to 2.6.0
- Tracker changed from Defect to Feature
- Subject changed from Permission "Add notes" is not working to Allow users to edit issues without adding notes.
- Target version changed from 2.6.0 to Candidate for next major release
The "Add notes" permission lets users add notes without editing the issue. But whenever a user is allowed to edit an issue, he is allowed to add notes by design.
But whenever a user is allowed to edit an issue, he is allowed to add notes by design.
IMHO this is not a good design decision:
- All systems I know (SBM, JIRA, ...) behave in another way: the feature of adding notes or attachments is something separate from the ticket itself (that others do it is a poor argument :-) I know)
- The expectation of removing the "Add note" check box in the permissions is that there is no possibility to add notes. Still allowing this because of edit rights on the issue undermines this and makes it impossible to realize that use case. Rights for editing issues should not be include adding notes.
Or put more simply, why restrict the amount of possible use cases artificially?
I consider the "Add Notes" behavior should be changed too.
- Related to Defect #35045: Mail handler bypasses add_issue_notes permission added
Also available in: Atom
PDF