https://www.redmine.org/https://www.redmine.org/favicon.ico?16793021292016-10-11T18:56:03ZRedmineRedmine - Patch #24051: As a non-admin user using API, I want to be able to filter users by their username without getting forbidden exceptionhttps://www.redmine.org/issues/24051?journal_id=739982016-10-11T18:56:03ZAnonymous
<ul><li><strong>File</strong> <a href="/attachments/16861">0001-As-a-non-admin-user-using-API-I-want-to-be-able-to-f.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/16861/0001-As-a-non-admin-user-using-API-I-want-to-be-able-to-f.patch">0001-As-a-non-admin-user-using-API-I-want-to-be-able-to-f.patch</a> added</li><li><strong>Status</strong> changed from <i>New</i> to <i>Resolved</i></li></ul><p>There is the patch for the development version. Requesting review for implement.</p>
<p>GitHub pull request if its now a thing : <a class="external" href="https://github.com/redmine/redmine/pull/86">https://github.com/redmine/redmine/pull/86</a></p> Redmine - Patch #24051: As a non-admin user using API, I want to be able to filter users by their username without getting forbidden exceptionhttps://www.redmine.org/issues/24051?journal_id=740052016-10-12T14:57:25ZAnonymous
<ul><li><strong>File</strong> <a href="/attachments/16864">allowing-nonsuperusers-to-search-users-by-filters-from-api.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/16864/allowing-nonsuperusers-to-search-users-by-filters-from-api.patch">allowing-nonsuperusers-to-search-users-by-filters-from-api.patch</a> added</li></ul> Redmine - Patch #24051: As a non-admin user using API, I want to be able to filter users by their username without getting forbidden exceptionhttps://www.redmine.org/issues/24051?journal_id=740062016-10-12T15:08:40ZAnonymous
<ul><li><strong>File</strong> <a href="/attachments/16866">redmine_lte_v3.2_allow-stdusers-filter-users-from-api.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/16866/redmine_lte_v3.2_allow-stdusers-filter-users-from-api.patch">redmine_lte_v3.2_allow-stdusers-filter-users-from-api.patch</a> added</li></ul><p>You can use this patch if you have Redmine <= 3.2</p> Redmine - Patch #24051: As a non-admin user using API, I want to be able to filter users by their username without getting forbidden exceptionhttps://www.redmine.org/issues/24051?journal_id=740072016-10-12T15:11:50ZAnonymous
<ul><li><strong>File</strong> <a href="/attachments/16867">redmine_lt_v3.3_allow-stdusers-filter-users-from-api.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/16867/redmine_lt_v3.3_allow-stdusers-filter-users-from-api.patch">redmine_lt_v3.3_allow-stdusers-filter-users-from-api.patch</a> added</li></ul> Redmine - Patch #24051: As a non-admin user using API, I want to be able to filter users by their username without getting forbidden exceptionhttps://www.redmine.org/issues/24051?journal_id=742332016-10-27T19:54:43ZHolger Just
<ul></ul><p>When removing the admin requirement on <code>UsersController#index</code>, there need to be the <code>User.visible</code> scope added to the ActiveRecord query in order to only show users which are visible to the current user.</p>
<p>Once this is fixed, I think it is a great idea to have a user listing available. With the now available role-based controls for the user visibility, this should work without negatively affecting privacy.</p> Redmine - Patch #24051: As a non-admin user using API, I want to be able to filter users by their username without getting forbidden exceptionhttps://www.redmine.org/issues/24051?journal_id=743502016-11-02T16:51:38ZMitsuhiro Tanino
<ul></ul><p>I think Defect <a class="issue tracker-1 status-1 priority-4 priority-default" title="Defect: Only Redmine administrators can get users from REST API (New)" href="https://www.redmine.org/issues/7773">#7773</a> is trying to solve same problem of this and I posted a patch on that thread.<br />Could I get a feedback for that patch?</p> Redmine - Patch #24051: As a non-admin user using API, I want to be able to filter users by their username without getting forbidden exceptionhttps://www.redmine.org/issues/24051?journal_id=746372016-11-22T16:49:58ZToshi MARUYAMA
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-1 priority-4 priority-default" href="/issues/7773">Defect #7773</a>: Only Redmine administrators can get users from REST API</i> added</li></ul>