Edgewall Software

Changes between Version 8 and Version 9 of CookBook/PermissionPolicies


Ignore:
Timestamp:
Apr 19, 2017, 6:05:54 PM (3 years ago)
Author:
Ryan J Ollos
Comment:

Document #8778.

Legend:

Unmodified
Added
Removed
Modified
  • CookBook/PermissionPolicies

    v8 v9  
    1731731. Grant other permissions such as `TICKET_CHGPROP`, `TICKET_APPEND` or `TICKET_MODIFY`. Users can only change tickets they can view, therefore you'll only be granting these permissions for tickets the user reported.
    174174
     175== Restrict Changing Ticket Milestone
     176
     177With the default permission policies enabled, a user with `TICKET_CHGPROP` and `MILESTONE_VIEW` can change the milestone of a ticket. Since 1.3.2 the behavior is implemented in the permission policy `DefaultTicketPolicy`. The action `TICKET_CHG_MILESTONE` is used to grant the privilege, however this permission is not defined through an `IPermissionRequestor` implementation and therefore not available to be assigned to users.
     178
     179The action can be defined using ExtraPermissionsProvider, and with no other changes to the permission policy, changing the milestone property will be restricted to users with the `TICKET_CHG_MILESTONE` permission.
     180
     181{{{#!ini
     182[extra-permissions]
     183_perms = TICKET_CHG_MILESTONE
     184}}}
     185
     186See also: #8778.
     187
     188
    175189----
    176190