Edgewall Software
Modify

Ticket #4630 (closed defect: fixed)

Opened 5 years ago

Last modified 3 years ago

Flaw in ticket assignee list

Reported by: eblot Owned by: ecarter
Priority: highest Milestone: 0.11
Component: ticket system Version: devel
Severity: major Keywords: permission
Cc:
Release Notes:
API Changes:

Description

I just bumped into an issue which looks like a regression (since the
upgrade to Trac trunk from 0.10.3, using r4665):

The drop-down list used to assign an owner to a ticket is not filled
as (I) expected.
Only a few names among all the users registered on the system appear
in the drop-down list.

The drop-down list content is built from the list of users that own
the TICKET_MODIFY permission.

When the TICKET_MODIFY permission is only set for the special
authenticated user, it seems that the list is not populated - w/ the
exception of the users that own 'parent' permissions, for example the
list of the administrators as TRAC_ADMIN permission leads to grant
TICKET_MODIFY permission.

Many others have already been authenticated on the system:

select * from session where authenticated=='1';

reports 34 users.

Additional comment from cboos:

This is likely a regression introduced by [4625]

Attachments

Change History

comment:1 Changed 5 years ago by cboos

  • Keywords permission added
  • Priority changed from normal to high
  • Severity changed from normal to major

Confirmed by #5328.

comment:2 Changed 5 years ago by eblot

  • Priority changed from high to highest
  • Severity changed from major to critical

Increasing the priority, as this should be fixed for 0.11

#5616 marked as another duplicate

comment:3 Changed 5 years ago by eblot

  • Severity changed from critical to major

comment:4 Changed 5 years ago by cboos

  • Milestone changed from 0.11.1 to 0.11
  • Owner jonas deleted

If either cmlenz or athomas could have a look... Thanks!

comment:5 Changed 5 years ago by anonymous

#5689 looks like another duplicate.

comment:6 Changed 5 years ago by Kenneth Xu <kennethxu@…>

FYI, I have users in 'poweruser' group, which has TRAC_ADMIN right. They are listed in the drop down. But other authenticated users with TRAC_MODIFY are not.

comment:7 Changed 5 years ago by ecarter

  • Resolution set to fixed
  • Status changed from new to closed

cboos is right, this is a regression from [4625]. The problem is that the optimized code did not take 'authenticated' into account.

Fixed using a brute-force inefficient solution in [5849], and I will reopen #4245.

comment:8 Changed 4 years ago by cboos

  • Keywords fixowner added

comment:9 Changed 3 years ago by cboos

  • Keywords fixowner removed
  • Owner set to ecarter
View

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
to The owner will be changed from ecarter. Next status will be 'closed'
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.