MantisBT - v3.0 Release
View Issue Details
0000826v3.0 Release[All Projects] Generalpublic2011-06-08 07:472013-08-28 11:25
Assigned Tocaseydk 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version3.0.0 
Summary0000826: Users can see tasks for which they don't have access
DescriptionI have made restrictions for users based on departments (user from one department can work only on tasks that are from that department).

They can't access to tasks for which they don't have rights (tasks are from other department).
But, if users change view in Task Filter to "All Tasks" he can see all tasks that exist in the Company. If they try to access them they can't because they are in some other departments.

Could it be possible that Task Filter shows only tasks for which users have rights (to view, edit...), and that they don't see tasks for which they don't have rights.

Thank you.
TagsNo tags attached.
Attached Files

2011-06-17 06:50   
You mean the ?m=tasks list or somewhere else?


Pedro A.
2011-06-21 03:29   
Yes, I mean on ?m=task.
When user go on ?m=task and select Task Filter "All Tasks" he see all tasks in the Company (although he can't open them).

Would it be possible that he see only tasks for which he have access?
2011-07-03 23:39   
Pedro, can you dig into this one for 2.4 this week?
2013-03-03 21:14   
Resolved in v3.0 development

Issue History
2011-06-08 07:47miroslawNew Issue
2011-06-17 06:50pedroaNote Added: 0001984
2011-06-17 06:50pedroaAssigned To => pedroa
2011-06-17 06:50pedroaStatusnew => feedback
2011-06-21 03:29miroslawNote Added: 0001987
2011-06-25 23:13caseydkProjectv2.3 Release (Closed) => Pending Requests
2011-07-03 23:39caseydkNote Added: 0002007
2013-03-02 23:13caseydkStatusfeedback => assigned
2013-03-02 23:13caseydkAssigned Topedroa => caseydk
2013-03-02 23:14caseydkProjectPending Requests => v3.0 Release
2013-03-03 21:14caseydkNote Added: 0002823
2013-03-03 21:14caseydkStatusassigned => resolved
2013-03-03 21:14caseydkResolutionopen => fixed
2013-08-28 10:24caseydkSeverityfeature => minor
2013-08-28 10:24caseydkProduct Version2.3 =>
2013-08-28 11:14caseydkFixed in Version => 3.0.0
2013-08-28 11:25caseydkStatusresolved => closed