Project

General

Profile

Restricting Task Visibility to Author, Assignee, and Custom Field (Country Manager)

Added by Suleyman Serkan Yildiz 7 months ago

Hello Redmine community,

I have encountered an issue for which I need your assistance. I am using Redmine, and I have set up a custom tracker type. Within this tracker type, I have a custom field named "Country Manager," which is of type "user."

Here is my current scenario: Any staff member can create tasks in this tracker type, and these tasks are visible to the assigned person (Assignee) and the person who created the task (Author). However, I have a specific requirement: I want both the Author, the Assignee, and the user specified in the "Country Manager" custom field to be able to see the task. At the same time, I want to ensure that other users with the "Country Manager" role cannot see tasks assigned to other "Country Managers."

How can I achieve this configuration? Is there a way to set up permissions or use another method to enable visibility for the Author, Assignee, and the specific "Country Manager" while restricting access for other "Country Managers"?

I would greatly appreciate any suggestions or guidance you can provide. Thank you!

Best regards,

-----
Environment:
Redmine version 5.0.5.stable
Ruby version 3.0.2-p107 (2021-07-07) [x86_64-linux-gnu]
Rails version 6.1.7.2
Environment production
Database adapter Mysql2
Mailer queue ActiveJob::QueueAdapters::AsyncAdapter
Mailer delivery smtp
Redmine settings:
Redmine theme A1 (includes JavaScript)
SCM:
Git 2.34.1
Filesystem
Redmine plugins:
redmine_agile 1.6.5
redmine_budgets 1.0.4
redmine_checklists 3.1.22
redmine_cms 1.2.4
redmine_contacts 4.3.7
redmine_contacts_helpdesk 4.2.1
redmine_contacts_invoices 4.2.7
redmine_drive 1.2.0
redmine_finance 2.1.8
redmine_people 1.6.3
redmine_products 2.1.5
redmine_questions 1.0.4
redmine_reporter 2.0.3
redmine_resources 1.0.8
redmine_zenedit 2.0.4
redmineup_tags 2.0.13
----


Replies (2)

RE: Restricting Task Visibility to Author, Assignee, and Custom Field (Country Manager) - Added by C S 7 months ago

As you probably know, authorization is controlled via “role management”. In a role you can control whether a ticket is visible with the tracker X or not...
Therefore, I don't see a useful solution for your scenario - the control/selection needs to be moved from the custom field to a higher level, namely the tracker. You can copy created trackers and then customize them...

RE: Restricting Task Visibility to Author, Assignee, and Custom Field (Country Manager) - Added by Suleyman Serkan Yildiz 7 months ago

Thank you for your response. However, as you've mentioned, the solution you provided doesn't quite meet our exact needs. Is it possible to address this requirement by writing a custom patch or developing a plugin?

    (1-2/2)