| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||
| ID | Project | Category | View Status | Date Submitted | Last Update | ||||
|---|---|---|---|---|---|---|---|---|---|
| 0001702 | v3.4 Release (Current) | User Admin | public | 2016-07-05 00:35 | 2019-01-03 12:53 | ||||
| Reporter | opto | ||||||||
| Assigned To | caseydk | ||||||||
| Priority | normal | Severity | minor | Reproducibility | have not tried | ||||
| Status | closed | Resolution | fixed | ||||||
| Product Version | |||||||||
| Target Version | Fixed in Version | ||||||||
| Summary | 0001702: Task Permissions gone crazy? | ||||||||
| Description | setting a task: deny access for a user with allow all on all non admin modules. he can see the task although access is denied. This is probably due to the fact that getTaskTree does not respect permissions, it just shows all tasks (in vw_tasks.php | ||||||||
| Tags | No tags attached. | ||||||||
| Attached Files |
| ||||||||
 Relationships |
|
 Relationships |
| Notes |
|
|
caseydk (administrator) 2016-12-29 21:08 |
Added the check using canView() in the tree. Ref: https://github.com/web2project/web2project/commit/beacc8e336955be22b7ac2e3565143f0ebd3d190 |
|
caseydk (administrator) 2019-01-03 12:53 |
In the 31 Dec 2018 release: http://docs.web2project.net/release-notes/3.4.html |
| Notes |
| Issue History |
|||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2016-07-05 00:35 | opto | New Issue | |
| 2016-07-05 09:38 | opto | Summary | Permissions gone crazy? => Task Permissions gone crazy? |
| 2016-07-05 09:38 | opto | Description Updated | View Revisions |
| 2016-12-26 23:34 | caseydk | Project | v3.3 Release => v3.4 Release (Current) |
| 2016-12-29 21:08 | caseydk | Assigned To | => caseydk |
| 2016-12-29 21:08 | caseydk | Status | new => resolved |
| 2016-12-29 21:08 | caseydk | Resolution | open => fixed |
| 2016-12-29 21:08 | caseydk | Note Added: 0003858 | |
| 2019-01-03 12:53 | caseydk | Note Added: 0003963 | |
| 2019-01-03 12:53 | caseydk | Status | resolved => closed |
| Issue History |