Make the state transition dependant on group membership in addition to the boiled down group permissions in workflows

[jim@…]

That would make it possible to only allow users that are members of the group user_group to perform the workflow action.

disapprove = solved -> reopened 
disapprove.name = Disapprove Solution 
disapprove.permissions = user_group  # instead of TICKET_APPEND 
disapprove.operations = del_owner 

[cblin@…]

I vote for this issue

[osimons]

This will anyway have to wait as improvements in the user system are needed on the API level. See #6703 comments and further links to tickets and discussions for more information.

[Christian Boos]

Replying to osimons:

This will anyway have to wait as improvements in the user system are needed on the API level. See #6703 comments and further links to tickets and discussions for more information.

See #5648 now.

[Ryan J Ollos]

#11839 allows groups and permissions to be specified in the set_owner attribute.

[Ryan J Ollos]

After spending some time on this, I realized it's a case that should be handled by ExtraPermissionsProvider. Define a permission action, which for the example might be TICKET_DISAPPROVE. Assign that permission action to the groups that you'd like to perform the workflow action. See TracWorkflow@73.