Defect #7729
closed
User with only issue view and add note ermission can change issue status
Added by Etienne Massip over 13 years ago.
Updated over 13 years ago.
Category:
Issues permissions
Description
As reported by Lee Hugues in the forum (see RE: Edit Issues Permission / Change Issue Properties), someone which role allows him only for viewing issue and adding note will still be able to change properties status, assignee, % done and target version.
It requires also that a workflow is defined for the role.
- Affected version (unused) set to 1.1.1
- Affected version set to 1.1.1
AFAIK, this is how it works since the very first versions of Redmine. A user allowed to change the status of an issue is allowed to update these properties as well.
- Target version deleted (
Candidate for next minor release)
Why these (except Status) ?
More a consensus than a particular reason. Changing the status generally means that some work was done on the issue and that progress, assignee... may be changed.
I know that it's not a perfect solution. Would be much better with permissions per attribute.
- Status changed from New to Closed
- Resolution set to Duplicate
Closed as duplicate of #1919.
Also available in: Atom
PDF