search

satrun77 / tinyissue

Simple Issue Tracking for Teams
MIT License
48 stars 6 forks source link

Enforce access rights in Issue and project comments #117

Closed nickbe closed 8 years ago

nickbe commented 8 years ago

Users and developers should be able to edit/delete comments if they created them and also (for issues) if the current issue status grants them access to the relevant issue at all.

On the other hand managers, developers AND creators of an issue should always be able to add/edit/delete all comments.

nickbe commented 8 years ago

EDIT: On the other hand managers, developers AND creators of an issue should always be able to add/edit/delete all comments. or shouldn't they?

Under what circumstances do we want users to be able to edit comments. I think we could also tie this to the project type (public,internal and so on)

(See #133)

nickbe commented 8 years ago

Moving to #133