Defect #28254

issues in incorrect project

Added by Christophe Gosiau almost 5 years ago. Updated about 4 years ago.

Status:NewStart date:
Priority:NormalDue date:
Assignee:-% Done:


Category:Email receiving
Target version:-
Resolution: Affected version:


I came across an issue with redmine:email:receive_imap
As described here (, the script accepts a parameter to indicate the project where the new issue will be created in.
However, redmine checks the mail subject for a syntax like "[#123]". If found, the mail will be added as a reply of the given ticket.

It seems now that if the syntax "[#123]" is added in the subject, it is possible to add a reply to a project where the sender has no access to. Wouldn't it be better to check the project parameter and never add a reply if the ticket exists in another project than the one that is passed as a parameter?


#1 Updated by Go MAEDA about 4 years ago

  • Category set to Email receiving

Also available in: Atom PDF