Opened 7 years ago

Closed 7 years ago

#1470 closed defect (fixed)

ticket.update doesn't respect the TICKET_CHGPROP permission (or lack thereof)

Reported by: anonymous Owned by: athomas
Priority: normal Component: XmlRpcPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.10


ticket.update can change properties without the TICKET_CHGPROP permission, and you cannot change properties if you only have TICKET_CHGPROP (and not TICKET_APPEND)

Attachments (0)

Change History (1)

comment:1 Changed 7 years ago by athomas

  • Resolution set to fixed
  • Status changed from new to closed

"Fixed" in r2614. ticket.update() now requires TICKET_ADMIN.

Add Comment

Modify Ticket

as closed .
as The resolution will be set. Next status will be 'closed'.
to The owner will be changed from athomas. Next status will be 'closed'.
The resolution will be deleted. Next status will be 'reopened'.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.