Redmine

Jean-Philippe,

I think there is an issue on the welcome.rhtml page when the code lists all the projects:

<div class="splitcontentright">
<div class="box">
<h3><%=l(:label_project_latest)%></h3>
<ul>
<% for project in @projects >
<li>
<= link_to project.name, :controller => 'projects', :action => 'show', :id => project > (<=
format_time(project.created_on) >)<br />
<=h project.description >
</li>
< end %>
</ul>
</div>
</div>

Or, perhaps more importantly in the welcome_controller.rb:

def index
    @news = News.latest
    @projects = Project.latest
  end

Reason: If a user clicks on a non-public project where he is not a member, they will receive a blank page (error).

Perhaps it will be better not to see private projects where the user is not a member?

As a potential solution, let's update the Project.latest method to return 5 projects where logged_in_user is a member
or the project is public?

What do you think?

Todd