Ticket #3674 (closed defect: wontfix)

Opened 2 years ago

Last modified 1 year ago

Private ticket permission users can get ticket counts that include tickets they're not allowed to view

Reported by: jevans Assigned to: coderanger
Priority: normal Component: PrivateTicketsPlugin
Severity: minor Keywords:
Cc: Trac Release: 0.11

Description

A user with private tickets permissions can still query how many tickets meet criteria even if they can't see the tickets listed or view them.

For instance they can type in query?status=!closed&priority=critical to get a count of how many critical defects are open.

Attachments

Change History

09/05/08 23:23:52 changed by coderanger

  • status changed from new to closed.
  • resolution set to wontfix.

This is a core trac issue. PrivateTickets? is just a permission policy now.

04/02/09 18:46:13 changed by kontakt at meitzner.net

  • status changed from closed to reopened.
  • resolution deleted.
  • severity changed from normal to minor.

As this is still an issue in 0.11.3, could you maybe please post a reference to the corresponding Trac dev ticket, if there is one? I've not been lucky to find out if the issue is already filed there or not.

I understand the plugin cannot influence the way the number of results matching a query is calculated in the main app. However, I would be interested if there's a chance the issue can be dealt with in trac itself or not.

I have no experience with python, so I don't see where in the trac source I would have to look to fix the problem myself (query.py I guess?). Maybe you can point me somewhere and I'll set my employed programmer on it to hack it and develop a patch maybe.

Thank you very much!

04/02/09 18:54:59 changed by jevans

See #t7608

04/02/09 18:57:19 changed by coderanger

  • status changed from reopened to closed.
  • resolution set to wontfix.

Don't reopen tickets just because you don't like the answer.

Add/Change #3674 (Private ticket permission users can get ticket counts that include tickets they're not allowed to view)




Change Properties
Action