Modify

Opened 6 years ago

Closed 4 years ago

#3407 closed defect (worksforme)

Can't change owner unless you own it or it's unowned

Reported by: garyo Owned by: CuriousCurmudgeon
Priority: normal Component: BatchModifyPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11

Description

In the latest version of BatchModifyPlugin with trac 0.11 and python 2.5 on Linux, batch-changing owner seems to work OK as long as the ticket is currently unowned or owned by the person doing the batch modify. But that person can't change the owner of tickets they don't own. I'm guessing that's a permission issue; I looked at batchmodify/web_ui.py and it doesn't seem to do anything special with the owner. It just does this:

                t = Ticket(self.env, id)
                t.populate(values)
                t.save_changes(req.authname, comment)

and ticket/model.py doesn't seem to have any permission checking in populate or save_changes that would affect this. So I'm not sure where to look for what's causing it.

Attachments (0)

Change History (2)

comment:1 Changed 5 years ago by CuriousCurmudgeon

  • Owner changed from ashwin_phatak to CuriousCurmudgeon

I am not sure how this is possible either. The only permission check the plugin does is for TRAC_ADMIN and TRAC_BATCH_MODIFY. No checks are done to see if you own the ticket. Until I can see this reproduced by somebody else it will go on the backburner.

comment:2 Changed 4 years ago by CuriousCurmudgeon

  • Resolution set to worksforme
  • Status changed from new to closed

If you can reproduce this please reopen.

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.