Defect #31595

Error allowing assigning a task to a user when his role does not allow it

Added by Miguel Rodriguez Hernando almost 3 years ago. Updated over 2 years ago.

Status:ClosedStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Issues permissions
Target version:-
Resolution:Fixed Affected version:4.0.4

Description

Hi,

We have found an error in the roles of the users.

I thought it only happened in version 3.3.1, but it also happens in actual version 4.0.4.

we have a user called for example "*user1*" with a "*reporter*" role but in this role the option "*Issues can be assigned to this role*" when is disabled.
It happens that another user with a "*developer*" role or any other user that can assign tasks to another user, allows you to assign it to "user1" when it should not be possible because the latter belongs to the role of "reporter".

It seems that the assignment error occurs when the author of the task is the same as the "*reporter*" role.

Proven environments where it fails

Redmine version                4.0.4.stable
Ruby version 2.6.3-p62 (2019-04-16) [x86_64-linux]
Rails version 5.2.3
Environment production
Database adapter SQLite
Mailer queue ActiveJob::QueueAdapters::AsyncAdapter
Mailer delivery smtp
SCM:
Subversion 1.9.5
Mercurial 4.0
Bazaar 2.8.0
Git 2.11.0

Redmine version 3.3.1.stable
Ruby version 2.3.3-p222 (2016-11-21) [x86_64-linux-gnu]
Rails version 4.2.7.1
Environment production
Database adapter Mysql2

Best Regards


Related issues

Duplicates Redmine - Defect #31466: Error assigning a task to a user whose role does not allo... Closed

History

#1 Updated by Go MAEDA over 2 years ago

  • Status changed from New to Closed
  • Resolution set to Fixed

This issue is identical to #31466. Please don't open an issue with the same content with another issue.

#2 Updated by Go MAEDA over 2 years ago

  • Duplicates Defect #31466: Error assigning a task to a user whose role does not allow it added

Also available in: Atom PDF