Opened 2 years ago

Last modified 2 years ago

#10318 new defect

Email notification sent even not allowed

Reported by: szuir@… Owned by: bobbysmith007
Priority: high Component: TimingAndEstimationPlugin
Severity: critical Keywords:
Cc: Trac Release: 0.12


ver = 1.2.8b With Permissions

When email notification is configured an email is sent to all CCed people even the changing parameter has limited permission.

Eg.'Add Hours to Ticket' field is configured to be visible and may be changed only by users with TRAC_ADMIN permission but notification is sent to all CCed people.

Attachments (0)

Change History (1)

comment:1 Changed 2 years ago by bobbysmith007

Yes this is definitely something I have not tried to prevent. I will look into if there is anything that I can do about this.

I think it must still send to all CC'd people but elide fields they are not allowed to see (perhaps with a bit to make sure we dont send empty change emails).

Thanks for this report

Add Comment

Modify Ticket

as new The owner will remain bobbysmith007.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.