Defect #37358

Trackers can be assigned to users with role that do not have edit option on that tracker

Added by VD DV about 1 month ago.

Status:NewStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Permissions and roles
Target version:-
Resolution: Affected version:5.0.0

Description

Specific trackers can be assigned to users with role that do not have edit option on that tracker.

Expected behavior is that user that do not have edit option on specific tracker according to role based permissions, cannot be candidate for issue assignment. It simply does not make sense to assign issue to someone that only can view or add notes to issue, but cannot change for example status of the issue.

According to pasted image, only tracker "Support" should be assigned to user that owns role with permissions shown at image.

Right now, anyone that can view specific trackers, can also be assigned with that issue. That is wrong if user do not have possibility to edit assigned issue.

Maybe it is worth reconsidering adding also permission to "Be assignee" besides existing "View issues", "Edit Issues" and "Add notes".

Role based permissions.gif (17.1 KB) VD DV, 2022-06-27 13:09

Also available in: Atom PDF