RestyaPlatform / board

Trello like kanban board. Based on Restya platform.
http://restya.com/board/
Open Software License 3.0
2.03k stars 381 forks source link

iCal Feed breaks the restricted user permissions in v1.7 #4331

Closed susebus closed 2 years ago

susebus commented 3 years ago

Expected Behavior

User with restricted board permissions should only see tasks he is assigned in an exported iCal Feed

Current Behavior

User with restricted boards permissions can see ALL tasks in an exported iCal Feed

Screenshots (if appropriate):

Possible Solution

Steps to Reproduce (for bugs)

  1. add a user to a board you own
  2. give the user "restricted" permissions for the board
  3. assign the user to only some of the cards
  4. log in as the user (which has restricted permissions)
  5. go to board and export the iCal Feed
  6. user with restricted board permissions can see ALL cards in the feed

Context

I am testing the brand new version 1.7 in the official demo - thanks for all the improvements and new features! I really like the new restricted permission role and would really like to use it in our instance. But sadly it has the bug described above and breaks the intended permissions settings.

Your Environment