Opened 11 years ago

Closed 11 years ago

#1470 closed defect (fixed)

ticket.update doesn't respect the TICKET_CHGPROP permission (or lack thereof)

Reported by: anonymous Owned by: Alec Thomas
Priority: normal Component: XmlRpcPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.10


ticket.update can change properties without the TICKET_CHGPROP permission, and you cannot change properties if you only have TICKET_CHGPROP (and not TICKET_APPEND)

Attachments (0)

Change History (1)

comment:1 Changed 11 years ago by Alec Thomas

Resolution: fixed
Status: newclosed

"Fixed" in r2614. ticket.update() now requires TICKET_ADMIN.

Modify Ticket

Change Properties
Set your email in Preferences
as closed The owner will remain Alec Thomas.
The resolution will be deleted.

Add Comment

E-mail address and name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.