Redmine

Hi,

We have found an error in the roles of the users.

I thought it only happened in version 3.3.1, but it also happens in actual version 4.0.4.

we have a user called for example "*user1*" with a "*reporter*" role but in this role the option "*Issues can be assigned to this role*" when is disabled.
It happens that another user with a "*developer*" role or any other user that can assign tasks to another user, allows you to assign it to "user1" when it should not be possible because the latter belongs to the role of "reporter".

It seems that the assignment error occurs when the author of the task is the same as the "*reporter*" role.

Proven environments where it fails

Redmine version                4.0.4.stable
  Ruby version                   2.6.3-p62 (2019-04-16) [x86_64-linux]
  Rails version                  5.2.3
  Environment                    production
  Database adapter               SQLite
  Mailer queue                   ActiveJob::QueueAdapters::AsyncAdapter
  Mailer delivery                smtp
SCM:
  Subversion                     1.9.5
  Mercurial                      4.0
  Bazaar                         2.8.0
  Git                            2.11.0

Redmine version 3.3.1.stable
Ruby version 2.3.3-p222 (2016-11-21) [x86_64-linux-gnu]
Rails version 4.2.7.1
Environment production
Database adapter Mysql2

Best Regards