Project

General

Profile

Actions
Copy link

Defect #19700

closed

User not in a specified public project could add issues to the project

Added by icdc user over 9 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Invalid
Affected version:

Description

We use Redmine to set up a project management website. And now we encounter a problem, maybe the concepts are obscured.

We create a public project P, and user A is not in this project. When user A logins in, he could view project P, which is understandable.
But we find user A can also add issues to project A without any authority.

Is this a bug? Or should we change project P to a private one? Thank you!

Actions
Copy link

Also available in: Atom PDF