Edgewall Software
Modify ↓

Ticket #3289 (closed defect: fixed)

Opened 6 years ago

Last modified 6 years ago

only users with TICKET_MODIFY permission should change ticket owner or be assignable to tickets (restrict_owner)

Reported by: wkornew Owned by: cmlenz
Priority: normal Milestone: 0.10
Component: ticket system Version: 0.9.5
Severity: normal Keywords:
Cc:
Release Notes:
API Changes:

Description

Currently, TICKET_CHGPROP allows for changing the assigned user or accepting a ticket, but this operation belongs to the planning process and thus should be restricted to TICKET_MODIFY. This also means that restrict_owner should only show users with TICKET_MODIFY permission.

Attachments

ticket-api.diff​ (718 bytes) - added by wkornew 6 years ago.
apply patch to ticket/api.py
ticket-api.2.diff​ (1.8 KB) - added by wkornew 6 years ago.
please apply to ticket/api.py

Download all attachments as: .zip

Change History

Changed 6 years ago by wkornew

apply patch to ticket/api.py

comment:1 Changed 6 years ago by cmlenz

  • Status changed from new to assigned

Looks good IMO

Changed 6 years ago by wkornew

please apply to ticket/api.py

comment:2 Changed 6 years ago by cmlenz

  • Resolution set to fixed
  • Status changed from assigned to closed

Slightly modified version of the patch applied in [3425].

comment:3 Changed 6 years ago by wkornew

Please see #3295 for a related patch.

View ↑

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
to The owner will be changed from cmlenz. Next status will be 'closed'
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.