Edgewall Software
Modify

Opened 9 years ago

Closed 9 years ago

Last modified 8 years ago

#1396 closed enhancement (fixed)

Disable anonymous access for closing bugs

Reported by: ludde Owned by: jonas
Priority: normal Milestone: 0.9
Component: ticket system Version: devel
Severity: normal Keywords:
Cc:
Release Notes:
API Changes:

Description (last modified by cmlenz)

Anonymous users should not be able to resolve bugs. Support for closing bugs has to have permissions.

Attachments (3)

TicketClosePermissions.diff (13.0 KB) - added by ludde 9 years ago.
Patch for fine grained ticket permissions
TicketClosePermissions-r1496.diff (10.4 KB) - added by ludde 9 years ago.
TicketClosePermissions-r1496.2.diff (11.3 KB) - added by ludde 9 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 Changed 9 years ago by cmlenz

  • Description modified (diff)
  • Priority changed from highest to normal
  • Severity changed from critical to enhancement

See also #1211.

comment:2 Changed 9 years ago by cmlenz

In many environments, it's okay to allow anonymous users to resolve tickets (for example, the typical "ah, my mistake" follow-up).

So there could be an additional TICKET_RESOLVE permission that would be granted to anonymous by default, but could easily be restricted to authenticated users.

comment:3 Changed 9 years ago by anonymous

How about a system like in the php bugtracker, where the bug reporter can specify a password and with this password change the status. Then you can disallow anonymous users to resolve a bug.

(btw: anonymous users should not be allowed to accept a ticket, too)

Changed 9 years ago by ludde

Patch for fine grained ticket permissions

comment:4 Changed 9 years ago by anonymous

Added a diff attachment with support for more fine-grained permissions.

These are the new permissions:

  • TICKET_EDIT - Allow editing of ticket properties
  • TICKET_RESOLVE - Allow closing tickets
  • TICKET_APPEND - Only allow appending comments to the ticket
  • TICKET_ATTACH - Allow attaching files

This patch also implements #1211

Changed 9 years ago by ludde

Changed 9 years ago by ludde

comment:5 Changed 9 years ago by anonymous

Sorry, but why this patches not in trac trunk ?

comment:6 Changed 9 years ago by cmlenz

  • Milestone set to 0.9
  • Resolution set to fixed
  • Status changed from new to closed

Merged in [1516].

Add Comment

Modify Ticket

Change Properties
<Author field>
Action
as closed The owner will remain jonas.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from jonas to the specified user.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.