Project

General

Profile

Actions

Feature #33071

open

Prevent accidental deletion of contents with sudo mode

Added by Go MAEDA about 4 years ago. Updated about 3 years ago.

Status:
Reopened
Priority:
Normal
Assignee:
Category:
UI
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Fixed

Description

The attached patch adds protection against deletion of contents such as issues, wiki pages, and attachments by expanding operations covered by sudo mode that has been added in Redmine 3.1 (#19851).

Users sometimes mistakenly delete contents like issues. I think it is because deleting contents is so easy if they have appropriate permissions.

I think such accidents can be reduced with sudo mode. If sudo mode guards deletion of contents as well by requiring re-entering a password, users can have an opportunity to reconsider the operation.

Step 1: the user see "Are you sure?" dialog after clicking "Delete" button. Not a few users press OK without thinking.

Step 2: if sudo mode is enabled in configuration.yml and the attached patch is applied, Redmine requires user to re-enter their password before performing deletion. The user may notice that they are doing a daingerous operation.


Files


Related issues

Related to Redmine - Feature #2893: Add a view to confirm issue deletionReopened2009-03-04

Actions
Related to Redmine - Feature #34417: Require explicit confirmation when deleting a user or a projectClosedGo MAEDA

Actions
Actions

Also available in: Atom PDF