Defect #4407

Accept emails from anyone on a private project

Added by Thomas Pihl almost 8 years ago. Updated almost 8 years ago.

Status:ClosedStart date:2009-12-15
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Permissions and roles
Target version:0.9.0
Resolution:Fixed Affected version:

Description

Is that a fair assumption? I hope not since I'm setting up a mail gateway into a non-public project where I want to use anonymous as creator of issue (--unknown_user accept).

Isn't it enough to check the actual checkboxes on the role to see if they are allowed to create issue (or see one)? Anon users will not be able to see things through web interface anyhow.

Older than devel versions allowed things "my way" but I assume refactoring on security-models tightend this a bit.


Related issues

Related to Redmine - Feature #2230: Issue creation via email from anyone without a Redmine ac... New 2008-11-26
Duplicated by Redmine - Feature #3584: Allow creating of issues in private projects by anonymous... Closed 2009-07-04

Associated revisions

Revision 3195
Added by Jean-Philippe Lang almost 8 years ago

Adds a 'no_permission_check' option to the MailHandler.
Used with the 'project' option, it allows anyone to submit emails to a private inbox project (#4407).

History

#1 Updated by Jean-Philippe Lang almost 8 years ago

  • Subject changed from Role Anonymous seem to require public project to Accept emails from anyone on a private project
  • Status changed from New to Closed
  • Target version set to 0.9.0
  • Resolution set to Fixed

Fixed in r3195. You can now use a 'no_permission_check' option.
For example:

rdm-mailhandler --unknown_user accept --no-permission-check --project=foo

will let anyone submit emails to your private project foo.

Also available in: Atom PDF