Context Navigation

Modify ↓

#9379 new defect

Links to timeline are used even if the user does not have permission to view timeline

Reported by:	hakon.enger@…	Owned by:
Priority:	normal	Milestone:	unscheduled
Component:	timeline	Version:
Severity:	normal	Keywords:	bitesized
Cc:		Branch:
Release Notes:
API Changes:
Internal Changes:

Description

Dates formatted with dateinfo(), such as the wiki history view, link to the timeline even if the user does not have the permission TIMELINE_VIEW. I suggest to add a test for this permission in either get_timeline_link() or post_process_request() in timeline/web_ui.py.

Attachments (0)

Change History (1)

comment:1 by Remy Blank, 14 years ago

Keywords:	bitesized added
Milestone:	→ unscheduled

That makes sense, yes. Nice bite-sized task.

Modify Ticket

Change Properties

Summary:
Description:	Dates formatted with `dateinfo()`, such as the wiki history view, link to the timeline even if the user does not have the permission TIMELINE_VIEW. I suggest to add a test for this permission in either `get_timeline_link()` or `post_process_request()` in `timeline/web_ui.py`. You may use WikiFormatting here.
Type:		Priority:
Milestone:		Component:
Version:		Severity:
Keywords:		Cc:	Set your email in Preferences
Branch:
Release Notes:
API Changes:
Internal Changes:

Action

leave as new The ticket will remain with no owner.

unassign The ticket will be disowned.

resolve as The resolution will be set. Next status will be 'closed'.

assign The owner will be changed from (none) to anonymous. Next status will be 'assigned'.

Add Comment

Your email or username:

E-mail address and name can be saved in the Preferences .

You may use WikiFormatting here.

Attachments ↑ Description ↑

Note: See TracTickets for help on using tickets.

Download in other formats: