Actions
Defect #21382
closed
Watcher deletion of inactive user not possible for non-admin users
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Fixed
Affected version:
Description
| Redmine version | 3.1.1.stable |
| Ruby version | 2.2.1-p85 (2015-02-26) [x86_64-linux] |
| Rails version | 4.2.4 |
| Environment | production |
| Database adapter | Mysql2 |
Add a test user account as a watcher for issue.
Lock one test user account.
Login as non-admin user, having permission to delete issue watchers.
In the issue the delete icon is shown, clicking that nothing happens.
Additional information,
In the log,
The destroy controller tries to find only the active users which returns nothing (ActiveRecord::RecordNotFound (Couldn't find User with 'id'=xxx)
User.visible.find(params[:user_id]
Updated by
Actions