Modify ↓
#3289 closed defect (fixed)
only users with TICKET_MODIFY permission should change ticket owner or be assignable to tickets (restrict_owner)
Reported by: | wkornew | Owned by: | Christopher Lenz |
---|---|---|---|
Priority: | normal | Milestone: | 0.10 |
Component: | ticket system | Version: | 0.9.5 |
Severity: | normal | Keywords: | |
Cc: | Branch: | ||
Release Notes: | |||
API Changes: | |||
Internal Changes: |
Description
Currently, TICKET_CHGPROP allows for changing the assigned user or accepting a ticket, but this operation belongs to the planning process and thus should be restricted to TICKET_MODIFY. This also means that restrict_owner should only show users with TICKET_MODIFY permission.
Attachments (2)
Change History (5)
by , 19 years ago
Attachment: | ticket-api.diff added |
---|
comment:2 by , 19 years ago
Resolution: | → fixed |
---|---|
Status: | assigned → closed |
Slightly modified version of the patch applied in [3425].
Note:
See TracTickets
for help on using tickets.
apply patch to ticket/api.py