Opened 10 years ago

Closed 9 years ago

#1470 closed defect (fixed)

ticket.update doesn't respect the TICKET_CHGPROP permission (or lack thereof)

Reported by: anonymous Owned by: athomas
Priority: normal Component: XmlRpcPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.10


ticket.update can change properties without the TICKET_CHGPROP permission, and you cannot change properties if you only have TICKET_CHGPROP (and not TICKET_APPEND)

Attachments (0)

Change History (1)

comment:1 Changed 9 years ago by athomas

  • Resolution set to fixed
  • Status changed from new to closed

"Fixed" in r2614. ticket.update() now requires TICKET_ADMIN.

Add Comment

Modify Ticket

as closed The owner will remain athomas.
The resolution will be deleted. Next status will be 'reopened'.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.