Anonymous Login
2019-11-13 02:12 PST

View Revisions: Issue #1702

Summary 0001702: Task Permissions gone crazy?
Revision 2016-07-05 09:38 by opto
Description setting a task: deny access for a user with allow all on all non admin modules. he can see the task although access is denied.
This is probably due to the fact that getTaskTree does not respect permissions, it just shows all tasks (in vw_tasks.php

Revision 2016-07-05 00:35 by opto
Description setting a task: deny access for a user with allow all on all non admin modules. he can see the task although access is denied.

Going back, deleting the deny, setting a new deny for all access, view, edit etc for the same task: now he can see no tasks at all in the project

Only the denied task should be blocked, but not all