Modify ↓

Opened 17 years ago

Closed 17 years ago

#1470 closed defect (fixed)

ticket.update doesn't respect the TICKET_CHGPROP permission (or lack thereof)

Reported by: anonymous Owned by: Alec Thomas
Priority: normal Component: XmlRpcPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.10

Description

ticket.update can change properties without the TICKET_CHGPROP permission, and you cannot change properties if you only have TICKET_CHGPROP (and not TICKET_APPEND)

Attachments (0)

Change History (1)

comment:1 Changed 17 years ago by Alec Thomas

Resolution: → fixed
Status: new → closed

"Fixed" in r2614. ticket.update() now requires TICKET_ADMIN.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Alec Thomas.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment

E-mail address and name can be saved in the Preferences.

Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.