Actions
Defect #6742
closed
Custom queries defined as public can be edited by others
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Issues
Target version:
-
Start date:
2010-10-25
Due date:
% Done:
0%
Estimated time:
Resolution:
Wont fix
Affected version:
Description
When defining a custom query for issues it is possible to define it as 'public'. Therefore it can be used by everyone. Brilliant.
However, another user can edit this query, set it from "public" to "For all projects" and therefore turn it of for himself and set it for all projects to owner of the query.
Updated by Felix Schäfer about 14 years ago
This should only be possible for users with the permission "manage public custom queries", and those should be trustworthy enough to not do stuff like that.
Updated by Go MAEDA almost 7 years ago
- Status changed from New to Closed
- Resolution set to Wont fix
As Felix wrote, only users who have "Manage public queries" permission can edit public queries.
I think we don't have to change the behavior.
Actions