Redmine

Our company needs this feature.
We are developing this feature and we will propose a patch very soon.
Hope this feature will please some users :-)

The patch works with Redmine V1.2.1

When allowing users to manage projects, system administrators need to worry about projects that should be private are not public.
Unintended disclosure of information can lead to major information leaks.

By adding this permission, only some trusted users can publish the project.
It will reassure many system administrators.

I am not a big fan of adding new permission in the project setting.

I personally do not think there is much necessity of this feature for the following reasons:

• As long as admin enables "Login required", the project will never become world-accessible
• It complicates permission management. Two permissions "Edit project" and "Publish project" are required to change the project's "public" setting

Go MAEDA wrote:

I am not a big fan of adding new permission in the project setting.

I personally do not think there is much necessity of this feature for the following reasons:

• As long as admin enables "Login required", the project will never become world-accessible

I think there may be projects that have information that should not be shown to unauthorized users even if they are logged in (in some cases, employees of other companies are invited to Redmine).
I think we need a feature that restricts the project from being published by general users.

• It complicates permission management. Two permissions "Edit project" and "Publish project" are required to change the project's "public" setting

How about adding a setting that "allows general users to publish the project" instead of permissions?
If this setting is turned off, only the administrator can publish the project.