Defect #33629

403 on Versions via API and individual versions via WebUI and API

Added by Severin Schols over 2 years ago.

Status:NewStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Permissions and roles
Target version:-
Resolution: Affected version:4.1.0

Description

When trying to get a listing of the project's version or information on an individual version via the API, Redmine replies with a 403 error. A similar happens when clicking a version, like in the file overview of a project, I get a 403 error as well.

My user does have permissions to edit versions for that project, I can see and modify them in the project's configuration. I have not found any other permission that might be missing here.

Am I missing anything, or is this actually a bug?

Environment:
  Redmine version                4.1.0.stable
  Ruby version                   2.5.7-p206 (2019-10-01) [x86_64-linux]
  Rails version                  5.2.4.1

Also available in: Atom PDF