bugDrupal Forge - Bugs: bug #14929, Add issue link visible to users...

 
 

bug #14929: Add issue link visible to users without add issue permissions

Submitter:  Ricardo Gladwell <axon>
Submitted:  Tue 08 Nov 2005 09:37:15 AM UTC
   
 
Category:  Project Module Severity:  3 - Normal
Priority:  5 - Normal Item Group:  Issues
Status:  None Assigned to:  None
Open/Closed:  Open Release:  * 4.6.0
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 22 Nov 2005 08:10:08 PM UTC, comment #2: 

The project issue search facility is also visible to users without permissions to access the url!

Ricardo Gladwell <axon>
Group administrator
Tue 08 Nov 2005 02:47:57 PM UTC, comment #1: 

Access to issue search facility should also be restricted. Only allow privileged users to access project/issues/search/<project>.

Ricardo Gladwell <axon>
Group administrator
Tue 08 Nov 2005 09:37:15 AM UTC, original submission:  

The link to node/add/project_issue/<project>/feature and node/add/project_issue/<project>/bug are visible on the project summary page even when the viewing user has no permissions to add issues or bugs.

This should only be visible to users with the correct priviliges.

Ricardo Gladwell <axon>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

No changes have been made to this item

Back to the top

Powered by Savane 3.13-aa77.
Corresponding source code