Edgewall Software
Modify ↓

Opened 18 years ago

Closed 18 years ago

Last modified 18 years ago

#3289 closed defect (fixed)

only users with TICKET_MODIFY permission should change ticket owner or be assignable to tickets (restrict_owner)

Reported by: wkornew Owned by: Christopher Lenz
Priority: normal Milestone: 0.10
Component: ticket system Version: 0.9.5
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

Currently, TICKET_CHGPROP allows for changing the assigned user or accepting a ticket, but this operation belongs to the planning process and thus should be restricted to TICKET_MODIFY. This also means that restrict_owner should only show users with TICKET_MODIFY permission.

Attachments (2)

ticket-api.diff​ (718 bytes ) - added by wkornew 18 years ago.
apply patch to ticket/api.py
ticket-api.2.diff​ (1.8 KB ) - added by wkornew 18 years ago.
please apply to ticket/api.py

Download all attachments as: .zip

Change History (5)

by wkornew, 18 years ago

Attachment: ticket-api.diff​ added

apply patch to ticket/api.py

comment:1 by Christopher Lenz, 18 years ago

Status: new → assigned

Looks good IMO

by wkornew, 18 years ago

Attachment: ticket-api.2.diff​ added

please apply to ticket/api.py

comment:2 by Christopher Lenz, 18 years ago

Resolution: → fixed
Status: assigned → closed

Slightly modified version of the patch applied in [3425].

comment:3 by wkornew, 18 years ago

Please see #3295 for a related patch.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Christopher Lenz.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from Christopher Lenz to the specified user.

Add Comment
E-mail address and name can be saved in the Preferences .
Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.