Modify

Opened 10 years ago

Closed 10 years ago

#1871 closed enhancement (duplicate)

"private" ticket option which is only exposed to users with a particular permission

Reported by: ejucovy Owned by: anybody
Priority: normal Component: Request-a-Hack
Severity: normal Keywords:
Cc: Trac Release: 0.10

Description

I would love to have a "private" field on tickets, which, when set on a ticket, would hide that ticket in all reports, queries, etc and prevent it from being viewed unless the user has a particular VIEW_PRIVATE_TICKETS permission set. This would allow me to, for example, catalog security vulnerabilities without exposing those vulnerabilities in public.

The details here are fairly unimportant; for example I could imagine it might be difficult to actually hide all references to the ticket. I think the following would be sufficient and probably easier:

  1. the ticket itself should be unviewable to users without the VIEW_PRIVATE_TICKETS permission
  2. certain fields of the ticket (summary, description) should be obfuscated on all reports, queries etc to users without the VIEW_PRIVATE_TICKETS permission

Attachments (0)

Change History (1)

comment:1 Changed 10 years ago by ejucovy

Resolution: duplicate
Status: newclosed

whoops, looks like this already exists at http://trac-hacks.org/wiki/PrivateTicketsPlugin; I didn't see it when I looked earlier.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain anybody.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.