Actions
Defect #1772
closed
document listing shows on "my page" when viewing documents is disabled for the role.
Start date:
2008-08-12
Due date:
% Done:
0%
Estimated time:
Resolution:
Fixed
Affected version:
Description
user with role which has disabled viewing and managing documents for some project can see that project's document titles when he adds "documents" widget to his personal "my page" . after clicking on the document title,correct 403 not authorized page shows.
tested on redmine 0.7.2, 0.7.3 and current svn trunk - revision 1735. using ruby 1.8.6-26 on winxp,mysql 5.051b,rails 2.1.0 (freezed 2.0.2 in 0.7.2 and 0.7.3)
Updated by
Actions