https://www.redmine.org/https://www.redmine.org/favicon.ico?16793021292009-04-19T08:40:17ZRedmineRedmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=87052009-04-19T08:40:17ZMarkus Knittig
<ul></ul><p>There is such a permission, it's just hardcoded as public. Remove <code>, :public => true</code> in lib/redmine.rb to make it visible...</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=87102009-04-19T09:01:47ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Category</strong> changed from <i>Administration</i> to <i>Issues permissions</i></li><li><strong>Target version</strong> set to <i>0.9.0</i></li></ul> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=88712009-04-27T17:00:51ZJim Keller
<ul></ul><p>a 'View Own Issues' (e.g. issues assigned to you) permission might be useful as well. We have some roles where ideally they wouldn't be able to see any part of the project they're not involved in. Right now we're just setting up sub-projects to account for this situation, which is a reasonable alternative.</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=89882009-05-05T14:50:47ZGilles Pietri
<ul></ul><p>I'm working on this remotely, as there are numerous place where the view_issues permission doesn't seem enforced, and I need a given kind of user ("dumb mode") to view only issue they submit, and nothing else.. So I did quite some hacks, anybody interested in trying that out?</p>
<p>I will also issue a patch so as to start something at least... Since I'm quite new to redmine, and not that experienced with Rails, I'm sure knowledgeable people might review that efficiently :)</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=90112009-05-06T11:00:09ZThomas Pihl
<ul></ul><p>Yes, i am interested in trying it out (and helping in any way i can). This is a very much needed feature for us.</p>
<p>/T</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=94172009-05-20T12:25:40ZGilles Pietri
<ul><li><strong>File</strong> <a href="/attachments/2061">view_own_issues.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/2061/view_own_issues.patch">view_own_issues.patch</a> added</li></ul><p>OK, I finally did that, and diff'ed against SVN..</p>
<p>This adds a view_own_issue permission, and unset the public attribute for view_issues.<br />I modified the view & controller accordingly to take that into account. I also had to modify the query model, to take that into account.</p>
<p>I really have no experience with redmine, and only a light ruby background, so please feel free to suggest more elegant ways to do this. Especially, I'm not sure about how nice the permission attributes (lib/redmine.rb) should be set if cleaner that what I defined them too...</p>
<p>Enjoy ;)</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=94182009-05-20T12:32:45ZGilles Pietri
<ul><li><strong>File</strong> <a href="/attachments/2062">view_own_issues.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/2062/view_own_issues.patch">view_own_issues.patch</a> added</li></ul><p>Gilles Pietri wrote:</p>
<blockquote>
<p>OK, I finally did that, and diff'ed against SVN..</p>
</blockquote>
<p>OK, this is not the patch I intended to publish (diff between my 0.8.3 install and svn in case you wonder..). This is the good one.</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=94372009-05-21T18:17:14ZThomas Pihl
<ul></ul><p>Seems to work very well. I like it!</p>
<p>Perhaps one addition? When someone put you as watcher you should be able to see the issue? But then again, that might be a security issue.</p>
<p>/T</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=94382009-05-21T18:20:06ZThomas Pihl
<ul></ul><p>AND...</p>
<p>perhaps also if you have the issue assigned to you.</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=94402009-05-21T20:11:53ZThomas Pihl
<ul></ul><p>Found a small snag.</p>
<p>If a link to issues you're not allowed to view is rendered on wiki or repository, you're able to see Subject and Status on the mouse-over tooltip.</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=94412009-05-21T21:19:35ZThomas Pihl
<ul><li><strong>File</strong> <a href="/attachments/2069">added_checks.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/2069/added_checks.patch">added_checks.patch</a> added</li></ul><p>Added a patch for those checks. Check it out and modify to fit</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=94482009-05-22T11:00:08ZGilles Pietri
<ul></ul><p>Thomas Pihl wrote:</p>
<blockquote>
<p>Seems to work very well. I like it!</p>
<p>Perhaps one addition? When someone put you as watcher you should be able to see the issue? But then again, that might be a security issue.</p>
<p>/T</p>
</blockquote>
<p>Well it makes sense you should also see the one you're set to watch, gonna look into that.. Could anyone more "redmine-familiar" review that by the way?</p>
<p>Regards</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=97972009-06-16T18:41:28ZJens Goldhammer
<ul></ul><p>+1</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=103562009-07-27T15:04:56ZDmitry Shkolnikov
<ul></ul><p>+1</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=110032009-09-16T12:34:44ZGilles Pietri
<ul></ul><p>Hmm, I was considering an upgrade to 0.8.5 and tests on 0.9, then I found <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a></p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=110052009-09-16T14:31:51ZThomas Pihl
<ul></ul><p>This is NOT the same thing as <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a>.</p>
<p>Private issue means that a group (like support) could hide some issue from all others. <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: "View Issues" user permission (Closed)" href="https://www.redmine.org/issues/3187">#3187</a> means that each user only see their own reported/assigned issues. Both features are needed and they are not the same.</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=111932009-09-30T22:16:02ZPablo 09
<ul></ul><p>I have tried on 0.8.5.devel.2902 and it donĀ“t run.</p>
<p>Mysql::Error: You have an error in your SQL syntax;</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=112312009-10-02T16:40:59ZMarcel Evenson
<ul></ul><p>+1 for <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: "View Issues" user permission (Closed)" href="https://www.redmine.org/issues/3187">#3187</a> and <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a>. We've been waiting patiently for both of these to work their way into trunk .. but still no go. <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a> was opened over 2 years ago with many many patches submitted and this was opened over 5 months ago.. still nothing .. I think this is a prime example were open source fails :(</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=113152009-10-08T14:59:30ZJose Luna
<ul></ul><p>Marcel Evenson wrote:</p>
<blockquote>
<p>I think this is a prime example were open source fails :(</p>
</blockquote>
<p>I think you mean "this is a prime example where open source is imperfect". If redmine had 'failed', then you wouldn't be using it. Clearly, when you considered all factors, redmine was the superior choice for your project management needs. Otherwise, you would have chosen a different software (there are plenty of commercial alternatives).</p>
<p>This may surprise you, but commercial software has the exact same problem delivering features that customers request. Not everyone needs this feature, and it's very hard to manage all of the requested features while keeping a coherent roadmap for the future and a clean codebase.</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=113282009-10-09T19:20:07ZThomas Pihl
<ul></ul><p>Marcel Evenson wrote:</p>
<blockquote>
<p>+1 for <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: "View Issues" user permission (Closed)" href="https://www.redmine.org/issues/3187">#3187</a> and <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a>. We've been waiting patiently for both of these to work their way into trunk .. but still no go. <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a> was opened over 2 years ago with many many patches submitted and this was opened over 5 months ago.. still nothing .. I think this is a prime example were open source fails :(</p>
</blockquote>
<p>I'd like to disagree.</p>
<p>This is very much working open-source. There are a patch to implement already for <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: "View Issues" user permission (Closed)" href="https://www.redmine.org/issues/3187">#3187</a>. If you cannot make it work, you can always hire someone to do it for you. It will still be better quality and cheaper than closed source, hands down. Both <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a> and <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: "View Issues" user permission (Closed)" href="https://www.redmine.org/issues/3187">#3187</a> has been selected for 0.9 (work SOME ELSE is doing for us all). If they make it, it will be all good. If not, we can always patch by ourself (or by hired help). Let's all chip in with out +1 and offers to help coding (if we can) or testing (if we can't).</p>
<p>Just my 0.02 SEK (a very very cheap currency)</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=120812009-11-14T12:04:32ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li><li><strong>Resolution</strong> set to <i>Fixed</i></li></ul><p>View issues permission added in <a class="changeset" title="Add view_issues permission (#3187). A migration adds this permission to all existing roles to pre..." href="https://www.redmine.org/projects/redmine/repository/svn/revisions/3039">r3039</a>.<br />Thanks to Jose and Thomas :-)</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=120862009-11-14T16:03:07ZPatrick Hurrelmann
<ul></ul><p>Jean-Philippe Lang wrote:</p>
<blockquote>
<p>View issues permission added in <a class="changeset" title="Add view_issues permission (#3187). A migration adds this permission to all existing roles to pre..." href="https://www.redmine.org/projects/redmine/repository/svn/revisions/3039">r3039</a>.<br />Thanks to Jose and Thomas :-)</p>
</blockquote>
<p>Whooohoo! Thank you very much Jean-Philippe :)<br />Now I'm only waiting for Eric with his implemenatation of <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Inheritence of Versions to Subprojects (Closed)" href="https://www.redmine.org/issues/465">#465</a><br />and 0.9 will rock (much more than it already does)! :D</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=122322009-11-20T09:01:36ZHo Nguyen
<ul></ul><p>Hi, I updated to the latest in trunk. Got the "View Issues" permission but its behaviour seemed not correct. When uncheck "View Issues" for a role, so user assigned to that role not able to see any issue, including his own issue. I thought this feature is allow user to see only his own issues, is that correct?</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=126282009-12-02T17:32:46ZStanislav German-Evtushenko
<ul><li><strong>Status</strong> changed from <i>Closed</i> to <i>Reopened</i></li></ul><p>Ho Nguyen wrote:</p>
<blockquote>
<p>Hi, I updated to the latest in trunk. Got the "View Issues" permission but its behaviour seemed not correct. When uncheck "View Issues" for a role, so user assigned to that role not able to see any issue, including his own issue. I thought this feature is allow user to see only his own issues, is that correct?</p>
</blockquote>
<p>Same for me</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=126302009-12-02T17:53:14ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Status</strong> changed from <i>Reopened</i> to <i>Closed</i></li></ul><p>Please re-read the initial request, and see <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: New permission for issues: view_own_issue (Closed)" href="https://www.redmine.org/issues/2653">#2653</a>.</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=126342009-12-02T18:03:25ZStanislav German-Evtushenko
<ul></ul><p>Gilles Pietri wrote:</p>
<blockquote>
<p>Hmm, I was considering an upgrade to 0.8.5 and tests on 0.9, then I found <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Private issues (Closed)" href="https://www.redmine.org/issues/337">#337</a></p>
</blockquote>
<p>Gilles, please pay attention on <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: New permission for issues: view_own_issue (Closed)" href="https://www.redmine.org/issues/2653">#2653</a></p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=126352009-12-02T18:08:06ZStanislav German-Evtushenko
<ul></ul><p>Jean-Philippe Lang wrote:</p>
<blockquote>
<p>Please re-read the initial request, and see <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: New permission for issues: view_own_issue (Closed)" href="https://www.redmine.org/issues/2653">#2653</a>.</p>
</blockquote>
<p>Hello Jean-Philippe,<br />Ok, I got about this feature.<br />There is one small bug here too. I can't see tasks in activity of head project (right behaviour), but I can see it in childs (wrong).</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=126372009-12-02T19:00:38ZGilles Pietri
<ul></ul><p>Yeah, I didn't find the other one at first, and this is not the same thing. <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: New permission for issues: view_own_issue (Closed)" href="https://www.redmine.org/issues/2653">#2653</a> will however fit my use case, so I'll give it a shot.. but it's roughly the same idea as of what my patch was intended to do. Leaving this issue alone for now ;)</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=127872009-12-07T20:05:04ZHo Nguyen
<ul></ul><p>Gilles Pietri wrote:</p>
<blockquote>
<p>Yeah, I didn't find the other one at first, and this is not the same thing. <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: New permission for issues: view_own_issue (Closed)" href="https://www.redmine.org/issues/2653">#2653</a> will however fit my use case, so I'll give it a shot.. but it's roughly the same idea as of what my patch was intended to do. Leaving this issue alone for now ;)</p>
</blockquote>
<p>Gilles, waiting for your patch to <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: New permission for issues: view_own_issue (Closed)" href="https://www.redmine.org/issues/2653">#2653</a>, I tried your patch in this issue for trunk but not successful ...</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=130522009-12-18T05:36:26ZHo Nguyen
<ul></ul><p>Gilles Pietri wrote:</p>
<blockquote>
<p>Yeah, I didn't find the other one at first, and this is not the same thing. <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: New permission for issues: view_own_issue (Closed)" href="https://www.redmine.org/issues/2653">#2653</a> will however fit my use case, so I'll give it a shot.. but it's roughly the same idea as of what my patch was intended to do. Leaving this issue alone for now ;)</p>
</blockquote>
<p>Hi Gilles ... I have applied your patch to the trunk ant it worked perfectly for my case (don't allow customer to see internal issues). However, there is one side affect regarding the attachment. My customer cannot download the attachment if I set "view-own-issue" but got the 403 error "You are not authorized to access this page". Have you got the same issue?</p> Redmine - Feature #3187: "View Issues" user permissionhttps://www.redmine.org/issues/3187?journal_id=618932015-03-05T04:11:03ZGo MAEDA
<ul><li><strong>Has duplicate</strong> <i><a class="issue tracker-1 status-5 priority-4 priority-default closed" href="/issues/3404">Defect #3404</a>: Rendered link r+revision-no reveal to much in mouse-over tooltip</i> added</li></ul>