Project

General

Profile

Actions

Defect #35141

open

Irrelevant groups in "Add watchers" list

Added by Yuriy Millen almost 3 years ago. Updated about 2 years ago.

Status:
Confirmed
Priority:
Normal
Assignee:
-
Category:
Issues permissions
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Affected version:

Description

Redmine 4.2 introduced an ability to add groups to watchers list.

The logic prior was that in the "Add watchers" list appeared only users, who have access to a particular tracker. However, this logic is ignored for groups - it is possible to add any group regardless of a whether this group was access to the tracker or not.

Actions #1

Updated by Go MAEDA about 2 years ago

  • Status changed from New to Confirmed

I have confirmed the issue. The following steps can reproduce the issue.

1. Add a group as a member of a project
2. Navigate to Administration > Roles and click "Edit" of the group's role
3. Scroll down to "Issue tracking" on the edit page of the role
4. Remove all permissions for all trackers
5. Back to the project's page and try to add watchers of an issue. You should not be able to add the group as a watcher but you can

Actions

Also available in: Atom PDF