Defect #35141

Irrelevant groups in "Add watchers" list

Added by Yuriy Millen over 1 year ago. Updated 11 months ago.

Status:ConfirmedStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Issues permissions
Target version:-
Resolution: Affected version:4.2.0

Description

Redmine 4.2 introduced an ability to add groups to watchers list.

The logic prior was that in the "Add watchers" list appeared only users, who have access to a particular tracker. However, this logic is ignored for groups - it is possible to add any group regardless of a whether this group was access to the tracker or not.

History

#1 Updated by Go MAEDA 11 months ago

  • Status changed from New to Confirmed

I have confirmed the issue. The following steps can reproduce the issue.

1. Add a group as a member of a project
2. Navigate to Administration > Roles and click "Edit" of the group's role
3. Scroll down to "Issue tracking" on the edit page of the role
4. Remove all permissions for all trackers
5. Back to the project's page and try to add watchers of an issue. You should not be able to add the group as a watcher but you can

Also available in: Atom PDF