Redmine

      @private_issues_by_tracker = Issue.count(:group => :tracker,

                                               :include => [:project, :status, :tracker],

                                               :conditions => ["(#{cond}) AND #{IssueStatus.table_name}.is_closed=? AND #{Issue.table_name}.private=?", false, true])

    # The private issues should be removed from events

    events.each do |event|

      events.delete(event) if event.kind_of?(Issue) && !event.visible?(User.current, Project.find(event.project))

    end

  def visible? (usr, project)

     private==false || private==true &&

                         (

                           usr.allowed_to?(:view_private_issues, project) ||

                           author == usr

                         )

  end

<% if User.current.allowed_to?(:add_private_issues, @project) %>

<p><%=f.check_box :private %></p>

<% end%>

          <% if issue.visible? User.current, @project %>

        	<tr id="issue-<%= issue.id %>" class="hascontextmenu <%= cycle('odd', 'even') %> <%= css_issue_classes(issue) %>">

              <td class="checkbox"><%= check_box_tag("ids[]", issue.id, false, :id => nil) %></td>

              <td><%= link_to issue.id, :controller => 'issues', :action => 'show', :id => issue %></td>

              <% query.columns.each do |column| %><%= content_tag 'td', column_content(column, issue), :class => column.name %><% end %>

            </tr>

          <% end %>

          <% if issue.visible? User.current, @project %>

            <tr id="issue-<%= issue.id %>" class="hascontextmenu <%= cycle('odd', 'even') %> <%= css_issue_classes(issue) %>">

                <td class="id">

                    <%= check_box_tag("ids[]", issue.id, false, :style => 'display:none;') %>

                    <%= link_to issue.id, :controller => 'issues', :action => 'show', :id => issue %>

                </td>

                <td><%=h issue.project.name %> - <%= issue.tracker.name %><br />

                    <%= issue.status.name %> - <%= format_time(issue.updated_on) %></td>

                <td class="subject">

                    <%= link_to h(issue.subject), :controller => 'issues', :action => 'show', :id => issue %>

                </td>

            </tr>

          <% end %>

<% if @issue.visible? User.current, @project%>

    <% if @issue.private %>

    <td class="private-issue"><b><%=l(:field_private)%></b></td>

    <% end %>

<% else %>

  <p class="nodata"><%=l(:label_access_denied)%> </p>

<% end %>

      (<%= @private_issues_by_tracker[tracker] || 0 %> <%= lwr(:label_private_issues, @private_issues_by_tracker[tracker] || 0)%>)

class AddIssuesPrivateFlag < ActiveRecord::Migration

  def self.up

    add_column :issues, :private, :boolean, :default => false, :null => false

  end

  def self.down

    remove_column :issues, :private

  end

end

field_private: Private issue

permission_add_private_issues: Add private issues

permission_view_private_issues: View private issues

label_access_denied: Access denied

label_private_issues: private

label_private_issues_plural: private

field_private: Конфиденциальная задача

label_access_denied: Доступ запрещен

label_private_issues_plural2: конфиденциальных

label_private_issues_plural5: конфиденциальных

label_private_issues_plural: конфиденциальных

label_private_issues: конфиденциальная

permission_add_private_issues: Добавление конфиденциальных задач

permission_view_private_issues: Просмотр конфиденциальных задач

    map.permission :add_private_issues, {:issues => :new}

    map.permission :view_private_issues, {:projects => [:changelog, :roadmap],

                                  :issues => [:index, :changes, :show, :context_menu],

                                  :versions => [:show, :status_by],

                                  :queries => :index,

                                  :reports => :issue_report}

issues_008: 

  created_on: <%= 5.days.ago.to_date.to_s(:db) %>

  project_id: 1

  updated_on: <%= 2.days.ago.to_date.to_s(:db) %>

  priority_id: 5

  subject: Private Issue on project 2

  id: 8

  fixed_version_id: 

  category_id: 

  description: Priavte Issue on project 2

  tracker_id: 1

  assigned_to_id: 

  author_id: 7

  status_id: 1

  private: 1

members_006: 

  id: 6

  created_on: 2006-07-19 19:35:37 +02:00

  project_id: 1

  role_id: 3

  user_id: 7

    - :add_private_issues

    - :view_private_issues

    - :view_private_issues

    - :add_private_issues

users_007:

  id: 7

  created_on: 2009-01-27 01:20:19 +03:00

  status: 1

  last_login_on:

  language: ru

  hashed_password: 7feb7657aa7a7bf5aef3414a5084875f27192415

  updated_on: 2009-01-27 19:33:19 +03:00

  admin: false

  mail: vasja@somenet.foo

  lastname: Pupkin

  firstname: Vasja

  auth_source_id:

  mail_notification: true

  login: vasiliy

  type: User

  def test_show_private_issue_by_manager

    @request.session[:user_id] = 2

    get :show, :id => 8

    assert_response :success

    assert_tag :td, :attributes => { :class => 'private-issue'}

  end

  def test_show_private_issue_by_admin

    @request.session[:user_id] = 1

    get :show, :id => 8

    assert_response :success

    assert_tag :td, :attributes => { :class => 'private-issue'}

  end

  def test_show_private_issue_by_developer

    @request.session[:user_id] = 3

    get :show, :id => 8

    assert_response :success

    # Developer can view private issues

    assert_tag :td, :attributes => { :class => 'private-issue'}

  end

  def test_show_private_issue_by_issue_author

    # issue author always can browse his issue

    @request.session[:user_id] = 7

    get :show, :id => 8

    assert_response :success

    assert_tag :input, :attributes => { :name => 'issue[private]'}

    assert_tag :td, :attributes => { :class => 'private-issue'}

  end

  def test_show_private_issue_by_non_member

    @request.session[:user_id] = 4

    get :show, :id => 8

    assert_response :success

    assert_no_tag :input, :attributes => { :name => 'issue[private]'}

    assert_no_tag :td, :attributes => { :class => 'private-issue'}

    assert_tag :p, :attributes => { :class => 'nodata'}

  end

  def test_show_private_issue_by_anonymous

    get :show, :id => 8

    assert_response :success

    assert_no_tag :input, :attributes => { :name => 'issue[private]'}

    assert_no_tag :td, :attributes => { :class => 'private-issue'}

    assert_tag :p, :attributes => { :class => 'nodata'}

  end

  def test_get_new_manager

    # Manager have add_private_issue permission

    @request.session[:user_id] = 2

    get :new, :project_id => 1, :tracker_id => 1

    assert_response :success

    assert_template 'new'

    assert_tag :input, :attributes => { :name => 'issue[private]'}

  end

  def test_get_new_developer

    @request.session[:user_id] = 3

    get :new, :project_id => 1, :tracker_id => 1

    assert_response :success

    assert_template 'new'

    # Developer can't change issue type

    assert_no_tag :input, :attributes => { :name => 'issue[private]'}

  end

  def test_get_new_reporter

    @request.session[:user_id] = 7

    get :new, :project_id => 1, :tracker_id => 1

    assert_response :success

    assert_template 'new'

    # Reporter can add private issue

    assert_tag :input, :attributes => { :name => 'issue[private]'}

  end

  def test_get_new_admin

    @request.session[:user_id] = 1

    get :new, :project_id => 1, :tracker_id => 1

    assert_response :success

    assert_template 'new'

    assert_tag :input, :attributes => { :name => 'issue[private]'}

  end

  #private issue are not visible for Anonymous user in global Activity

  def test_private_issue_global_activity_for_anonymous

    get :activity

    assert_response :success

    assert_template 'activity'

    assert_not_nil assigns(:events_by_day)

    assert_no_tag :tag => "h3",

               :content => /#{5.day.ago.to_date.day}/,

               :sibling => { :tag => "dl",

                 :child => { :tag => "dt",

                   :attributes => { :class => /issue/ },

                   :child => { :tag => "a",

                     :content => /#{Issue.find(8).subject}/,

                   }

                 }

               }

  end

  def test_private_issue_global_activity_for_manager

    @request.session[:user_id] = 2 # manager

    get :activity

    assert_response :success

    assert_template 'activity'

    assert_not_nil assigns(:events_by_day)

    assert_tag :tag => "h3",

               :content => /#{5.day.ago.to_date.day}/,

               :sibling => { :tag => "dl",

                 :child => { :tag => "dt",

                   :attributes => { :class => /issue/ },

                   :child => { :tag => "a",

                     :content => /#{Issue.find(8).subject}/,

                   }

                 }

               }

  end

  def test_private_issue_global_activity_for_developer

    @request.session[:user_id] = 3 # developer

    get :activity

    assert_response :success

    assert_template 'activity'

    assert_not_nil assigns(:events_by_day)

    assert_tag :tag => "h3",

               :content => /#{5.day.ago.to_date.day}/,

               :sibling => { :tag => "dl",

                 :child => { :tag => "dt",

                   :attributes => { :class => /issue/ },

                   :child => { :tag => "a",

                     :content => /#{Issue.find(8).subject}/,

                   }

                 }

               }

  end

  def test_private_issue_global_activity_for_non_member

    @request.session[:user_id] = 4 # does not have any role in project #1

    get :activity

    assert_response :success

    assert_template 'activity'

    assert_not_nil assigns(:events_by_day)

    assert_no_tag :tag => "h3",

               :content => /#{5.day.ago.to_date.day}/,

               :sibling => { :tag => "dl",

                 :child => { :tag => "dt",

                   :attributes => { :class => /issue/ },

                   :child => { :tag => "a",

                     :content => /#{Issue.find(8).subject}/,

                   }

                 }

               }

  end

  def test_visible

    issue = Issue.new(:project_id => 1, :tracker_id => 1, :author_id => 2, :status_id => 1, :priority => Enumeration.get_values('IPRI').first, :subject => 'test_private_create', :description => 'IssueTest#test_private_create', :estimated_hours => '5:30', :private => true)

    assert issue.save

    issue.reload

    assert_equal true, issue.private

    # Test fixtures contain "add_private_issues" and "view_private_issues"

    # permissions for Manager role and only "view_private_issues" for Developer.

    # User with id #3 in project with id #1 has Developer role

    assert_equal true, issue.visible?(User.find(3), Project.find(1))

    # User with id #2 in project with id #1 has Manager role

    assert_equal true, issue.visible?(User.find(2), Project.find(1))

    # User with id #6 has Anonymous role

    assert_equal false, issue.visible?(User.find(6), Project.find(1))

    # User with id #4 does not have any role in project #1

    assert_equal false, issue.visible?(User.find(4), Project.find(1))

  end

    assert_equal 3, @ecookbook.members.size

    assert_equal 4, Member.find(:all, :conditions => ['project_id = ?', @ecookbook.id]).size