Error assigning a task to a user whose role does not allow it

Added by Miguel Rodriguez Hernando over 3 years ago

Hi,

We have found an error in the roles of the users.

we have a user called for example "*user1*" with a "*reporter*" role but in this role the option "*Issues can be assigned to this role*" is disabled.
It happens that another user with a "*developer*" role or any other user that can assign tasks to another user, allows you to assign it to "user1" when it should not be possible because the latter belongs to the role of "reporter".

This is our environment:

Redmine version 3.3.1.stable
Ruby version 2.3.3-p222 (2016-11-21) [x86_64-linux-gnu]
Rails version 4.2.7.1
Environment production
Database adapter Mysql2
SCM:
Git 2.11.0
Filesystem
Redmine plugins:
no plugin installed

Best regards