Project

General

Profile

Actions

Defect #1772

closed

document listing shows on "my page" when viewing documents is disabled for the role.

Added by Jozef Menda about 16 years ago. Updated about 16 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Documents
Target version:
Start date:
2008-08-12
Due date:
% Done:

0%

Estimated time:
Resolution:
Fixed
Affected version:

Description

user with role which has disabled viewing and managing documents for some project can see that project's document titles when he adds "documents" widget to his personal "my page" . after clicking on the document title,correct 403 not authorized page shows.
tested on redmine 0.7.2, 0.7.3 and current svn trunk - revision 1735. using ruby 1.8.6-26 on winxp,mysql 5.051b,rails 2.1.0 (freezed 2.0.2 in 0.7.2 and 0.7.3)

Actions #1

Updated by Jean-Philippe Lang about 16 years ago

  • Category set to Documents
  • Status changed from New to Closed
  • Target version set to 0.8
  • Resolution set to Fixed

Fixed in r1766. Thanks for pointing out.

Actions

Also available in: Atom PDF