Error assigning a task to a user whose role does not allow it

Added by Miguel Rodriguez Hernando over 3 years ago


We have found an error in the roles of the users.

we have a user called for example "*user1*" with a "*reporter*" role but in this role the option "*Issues can be assigned to this role*" is disabled.
It happens that another user with a "*developer*" role or any other user that can assign tasks to another user, allows you to assign it to "user1" when it should not be possible because the latter belongs to the role of "reporter".

This is our environment:

Redmine version 3.3.1.stable
Ruby version 2.3.3-p222 (2016-11-21) [x86_64-linux-gnu]
Rails version
Environment production
Database adapter Mysql2
Git 2.11.0
Redmine plugins:
no plugin installed

Best regards