Edgewall Software
Modify

Opened 14 years ago

Closed 14 years ago

Last modified 13 years ago

#1396 closed enhancement (fixed)

Disable anonymous access for closing bugs

Reported by: ludde Owned by: Jonas Borgström
Priority: normal Milestone: 0.9
Component: ticket system Version: devel
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:

Description (last modified by Christopher Lenz)

Anonymous users should not be able to resolve bugs. Support for closing bugs has to have permissions.

Attachments (3)

TicketClosePermissions.diff (13.0 KB ) - added by ludde 14 years ago.
Patch for fine grained ticket permissions
TicketClosePermissions-r1496.diff (10.4 KB ) - added by ludde 14 years ago.
TicketClosePermissions-r1496.2.diff (11.3 KB ) - added by ludde 14 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 by Christopher Lenz, 14 years ago

Description: modified (diff)
Priority: highestnormal
Severity: criticalenhancement

See also #1211.

comment:2 by Christopher Lenz, 14 years ago

In many environments, it's okay to allow anonymous users to resolve tickets (for example, the typical "ah, my mistake" follow-up).

So there could be an additional TICKET_RESOLVE permission that would be granted to anonymous by default, but could easily be restricted to authenticated users.

comment:3 by anonymous, 14 years ago

How about a system like in the php bugtracker, where the bug reporter can specify a password and with this password change the status. Then you can disallow anonymous users to resolve a bug.

(btw: anonymous users should not be allowed to accept a ticket, too)

by ludde, 14 years ago

Attachment: TicketClosePermissions.diff added

Patch for fine grained ticket permissions

comment:4 by anonymous, 14 years ago

Added a diff attachment with support for more fine-grained permissions.

These are the new permissions:

  • TICKET_EDIT - Allow editing of ticket properties
  • TICKET_RESOLVE - Allow closing tickets
  • TICKET_APPEND - Only allow appending comments to the ticket
  • TICKET_ATTACH - Allow attaching files

This patch also implements #1211

comment:5 by anonymous, 14 years ago

Sorry, but why this patches not in trac trunk ?

comment:6 by Christopher Lenz, 14 years ago

Milestone: 0.9
Resolution: fixed
Status: newclosed

Merged in [1516].

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Jonas Borgström.
The resolution will be deleted. Next status will be 'reopened'.
to as closed The owner will be changed from Jonas Borgström to the specified user.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.