maxrossello / redmine_extended_watchers

Grant additional issue and project view permissions to watcher users
GNU General Public License v3.0
44 stars 20 forks source link

Everyone could link to the ticket #17

Closed chan15 closed 4 years ago

chan15 commented 8 years ago

I already set the the permission that user can only see the ticket he opened or assigned to him, but after installed this plugin, the permission is not only open for the watcher, everyone could access the ticket by the link

maxrossello commented 8 years ago

Thank you for reporting this, I acknowledge the problem.

In the meanwhile, if you are using the master branch, remove the "view own" permission since it is not necessary for the scope (you may use the "with view own" branch if you want to have the permission mandatorily set for the issue to be visible). On master, with no permissions set, the user will see the issue if and only if he is set as a watcher.

chan15 commented 8 years ago

I am not familiar with Rails, will you fix this? appreciated

maxrossello commented 8 years ago

I will, although I need to cope with other priority tasks

chan15 commented 8 years ago

Thanks a lot

akurutin commented 7 years ago

Does the branch solve the problem or not? Can I assign users not from the project as watchers?

maxrossello commented 4 years ago

The plugin has been refreshed and now supports Redmine 3.4.13. I believe your problem should be solved. Please reopen the ticket if not. Thanks