Edgewall Software
Modify

Opened 15 years ago

Last modified 15 years ago

#9379 new defect

Links to timeline are used even if the user does not have permission to view timeline

Reported by: hakon.enger@… Owned by:
Priority: normal Milestone: unscheduled
Component: timeline Version:
Severity: normal Keywords: bitesized
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

Dates formatted with dateinfo(), such as the wiki history view, link to the timeline even if the user does not have the permission TIMELINE_VIEW. I suggest to add a test for this permission in either get_timeline_link() or post_process_request() in timeline/web_ui.py.

Attachments (0)

Change History (1)

comment:1 by Remy Blank, 15 years ago

Keywords: bitesized added
Milestone: unscheduled

That makes sense, yes. Nice bite-sized task.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as new The ticket will remain with no owner.
The ticket will be disowned.
as The resolution will be set. Next status will be 'closed'.
The owner will be changed from (none) to anonymous. Next status will be 'assigned'.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.