Edgewall Software
Modify

Opened 10 years ago

Closed 10 years ago

Last modified 8 years ago

#1396 closed enhancement (fixed)

Disable anonymous access for closing bugs

Reported by: ludde Owned by: jonas
Priority: normal Milestone: 0.9
Component: ticket system Version: devel
Severity: normal Keywords:
Cc:
Release Notes:
API Changes:

Description (last modified by cmlenz)

Anonymous users should not be able to resolve bugs. Support for closing bugs has to have permissions.

Attachments (3)

TicketClosePermissions.diff (13.0 KB) - added by ludde 10 years ago.
Patch for fine grained ticket permissions
TicketClosePermissions-r1496.diff (10.4 KB) - added by ludde 10 years ago.
TicketClosePermissions-r1496.2.diff (11.3 KB) - added by ludde 10 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 Changed 10 years ago by cmlenz

  • Description modified (diff)
  • Priority changed from highest to normal
  • Severity changed from critical to enhancement

See also #1211.

comment:2 Changed 10 years ago by cmlenz

In many environments, it's okay to allow anonymous users to resolve tickets (for example, the typical "ah, my mistake" follow-up).

So there could be an additional TICKET_RESOLVE permission that would be granted to anonymous by default, but could easily be restricted to authenticated users.

comment:3 Changed 10 years ago by anonymous

How about a system like in the php bugtracker, where the bug reporter can specify a password and with this password change the status. Then you can disallow anonymous users to resolve a bug.

(btw: anonymous users should not be allowed to accept a ticket, too)

Changed 10 years ago by ludde

Patch for fine grained ticket permissions

comment:4 Changed 10 years ago by anonymous

Added a diff attachment with support for more fine-grained permissions.

These are the new permissions:

  • TICKET_EDIT - Allow editing of ticket properties
  • TICKET_RESOLVE - Allow closing tickets
  • TICKET_APPEND - Only allow appending comments to the ticket
  • TICKET_ATTACH - Allow attaching files

This patch also implements #1211

Changed 10 years ago by ludde

Changed 10 years ago by ludde

comment:5 Changed 10 years ago by anonymous

Sorry, but why this patches not in trac trunk ?

comment:6 Changed 10 years ago by cmlenz

  • Milestone set to 0.9
  • Resolution set to fixed
  • Status changed from new to closed

Merged in [1516].

Add Comment

Modify Ticket

Change Properties
<Author field>
Action
as closed The owner will remain jonas.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from jonas to the specified user.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.