Modify ↓
Opened 18 years ago
Closed 17 years ago
#1470 closed defect (fixed)
ticket.update doesn't respect the TICKET_CHGPROP permission (or lack thereof)
Reported by: | anonymous | Owned by: | Alec Thomas |
---|---|---|---|
Priority: | normal | Component: | XmlRpcPlugin |
Severity: | normal | Keywords: | |
Cc: | Trac Release: | 0.10 |
Description
ticket.update can change properties without the TICKET_CHGPROP permission, and you cannot change properties if you only have TICKET_CHGPROP (and not TICKET_APPEND)
Attachments (0)
Note: See
TracTickets for help on using
tickets.
"Fixed" in r2614.
ticket.update()
now requiresTICKET_ADMIN
.