#33: Non-registered users can change ticket properties ------------------------+--------------------------------------------------- Reporter: EarleMartin | Owner: dom Type: defect | Status: new Priority: normal | Version: Severity: normal | Keywords: trac ------------------------+--------------------------------------------------- Being able to change priority, severity etc. should be restricted to registered users.
#33: Non-registered users can change ticket properties ------------------------+--------------------------------------------------- Reporter: EarleMartin | Owner: dom Type: task | Status: new Priority: normal | Version: Severity: normal | Resolution: Keywords: trac | ------------------------+--------------------------------------------------- Changes (by dom):
* type: defect => task
#33: Non-registered users can change ticket properties ------------------------+--------------------------------------------------- Reporter: EarleMartin | Owner: dom Type: task | Status: assigned Priority: normal | Version: Severity: normal | Resolution: Keywords: trac | ------------------------+--------------------------------------------------- Changes (by dom):
* status: new => assigned
Comment:
It doesn't get more fine-grained than modifying tickets unfortunately. I've made the TICKET_MODIFY right available only to authenticated users for the time being. Is this too restrictive do you think? (given the lack of any fine-grained control)
#33: Non-registered users can change ticket properties ------------------------+--------------------------------------------------- Reporter: EarleMartin | Owner: dom Type: task | Status: closed Priority: normal | Version: Severity: normal | Resolution: fixed Keywords: trac | ------------------------+--------------------------------------------------- Changes (by dom):
* resolution: => fixed * status: assigned => closed
Comment:
Erm, scratch that. There is a right TICKET_APPEND which I've left as for everyone.
openguides-tickets@lists.openguides.org