Edgewall Software

Opened 14 years ago

Closed 14 years ago

Last modified 13 years ago

#1396 closed enhancement (fixed)

Disable anonymous access for closing bugs

Reported by: ludde Owned by: Jonas Borgström
Priority: normal Milestone: 0.9
Component: ticket system Version: devel
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:

Description (last modified by Christopher Lenz)

Anonymous users should not be able to resolve bugs. Support for closing bugs has to have permissions.

Attachments (3)

TicketClosePermissions.diff (13.0 KB ) - added by ludde 14 years ago.
Patch for fine grained ticket permissions
TicketClosePermissions-r1496.diff (10.4 KB ) - added by ludde 14 years ago.
TicketClosePermissions-r1496.2.diff (11.3 KB ) - added by ludde 14 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 by Christopher Lenz, 14 years ago

Description: modified (diff)
Priority: highestnormal
Severity: criticalenhancement

See also #1211.

comment:2 by Christopher Lenz, 14 years ago

In many environments, it's okay to allow anonymous users to resolve tickets (for example, the typical "ah, my mistake" follow-up).

So there could be an additional TICKET_RESOLVE permission that would be granted to anonymous by default, but could easily be restricted to authenticated users.

comment:3 by anonymous, 14 years ago

How about a system like in the php bugtracker, where the bug reporter can specify a password and with this password change the status. Then you can disallow anonymous users to resolve a bug.

(btw: anonymous users should not be allowed to accept a ticket, too)

by ludde, 14 years ago

Attachment: TicketClosePermissions.diff added

Patch for fine grained ticket permissions

comment:4 by anonymous, 14 years ago

Added a diff attachment with support for more fine-grained permissions.

These are the new permissions:

  • TICKET_EDIT - Allow editing of ticket properties
  • TICKET_RESOLVE - Allow closing tickets
  • TICKET_APPEND - Only allow appending comments to the ticket
  • TICKET_ATTACH - Allow attaching files

This patch also implements #1211

comment:5 by anonymous, 14 years ago

Sorry, but why this patches not in trac trunk ?

comment:6 by Christopher Lenz, 14 years ago

Milestone: 0.9
Resolution: fixed
Status: newclosed

Merged in [1516].

Modify Ticket

Change Properties
Set your email in Preferences
as closed The owner will remain Jonas Borgström.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment

E-mail address and name can be saved in the Preferences .
Note: See TracTickets for help on using tickets.