Project

General

Profile

Actions
Copy link

Defect #3063

closed

Anonymous user without permission.

Added by Marcello Henrique about 15 years ago. Updated about 15 years ago.

Status:
Closed
Priority:
High
Assignee:
-
Category:
Permissions and roles
Target version:
-
Start date:
2009-03-27
Due date:
% Done:

0%

Estimated time:
Resolution:
Invalid
Affected version:

Description

Ruby version 1.8.7 (x86_64-linux)
RubyGems version 1.3.1
Rails version 2.2.2
Active Record version 2.2.2
Action Pack version 2.2.2
Active Resource version 2.2.2
Action Mailer version 2.2.2
Active Support version 2.2.2
Application root /home/redmine/redmine
Environment development
Database adapter mysql
Database schema version 20090318181151

My redmine checkout trunk revision 2636.

I had removed all permission and roles anonymous, view attachments, my environment not authentication required, but anonymous users may view my profile and issues...

Is it a bug?

Files

Download all files
role_anonymous.png (42.7 KB) role_anonymous.png Marcello Henrique, 2009-03-27 23:02
anonymous_view_issues.png (103 KB) anonymous_view_issues.png Marcello Henrique, 2009-03-27 23:02
anonymous_view_profile.png (78.2 KB) anonymous_view_profile.png Marcello Henrique, 2009-03-27 23:02
Actions
Copy link
 #1

Updated by Jean-Philippe Lang about 15 years ago

  • Status changed from New to Closed
  • Resolution set to Invalid

No, it's not a defect. If you don't want anonymous users to view anything, just force authentication.
In 0.9, you'll be able to remove 'view issues' permissions from the anonymous role, but anonymous users will still be able to view users' accounts.

Actions
Copy link
 #2

Updated by Marcello Henrique about 15 years ago

Jean-Philippe Lang wrote:

No, it's not a defect. If you don't want anonymous users to view anything, just force authentication.
In 0.9, you'll be able to remove 'view issues' permissions from the anonymous role, but anonymous users will still be able to view users' accounts.

It is possible by default all email accounts created using email hidden?

Actions
Copy link

Also available in: Atom PDF