Modify

Opened 7 years ago

Closed 7 years ago

#1871 closed enhancement (duplicate)

"private" ticket option which is only exposed to users with a particular permission

Reported by: ejucovy Owned by: anybody
Priority: normal Component: Request-a-Hack
Severity: normal Keywords:
Cc: Trac Release: 0.10

Description

I would love to have a "private" field on tickets, which, when set on a ticket, would hide that ticket in all reports, queries, etc and prevent it from being viewed unless the user has a particular VIEW_PRIVATE_TICKETS permission set. This would allow me to, for example, catalog security vulnerabilities without exposing those vulnerabilities in public.

The details here are fairly unimportant; for example I could imagine it might be difficult to actually hide all references to the ticket. I think the following would be sufficient and probably easier:

  1. the ticket itself should be unviewable to users without the VIEW_PRIVATE_TICKETS permission
  2. certain fields of the ticket (summary, description) should be obfuscated on all reports, queries etc to users without the VIEW_PRIVATE_TICKETS permission

Attachments (0)

Change History (1)

comment:1 Changed 7 years ago by ejucovy

  • Resolution set to duplicate
  • Status changed from new to closed

whoops, looks like this already exists at http://trac-hacks.org/wiki/PrivateTicketsPlugin; I didn't see it when I looked earlier.

Add Comment

Modify Ticket

Action
as closed The owner will remain anybody.
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.