Modify

Opened 10 years ago

Closed 9 years ago

#1470 closed defect (fixed)

ticket.update doesn't respect the TICKET_CHGPROP permission (or lack thereof)

Reported by: anonymous Owned by: Alec Thomas
Priority: normal Component: XmlRpcPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.10

Description

ticket.update can change properties without the TICKET_CHGPROP permission, and you cannot change properties if you only have TICKET_CHGPROP (and not TICKET_APPEND)

Attachments (0)

Change History (1)

comment:1 Changed 9 years ago by Alec Thomas

Resolution: fixed
Status: newclosed

"Fixed" in r2614. ticket.update() now requires TICKET_ADMIN.

Modify Ticket

Action
as closed The owner will remain Alec Thomas.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.