Defect #37729
closed
Time entries listed/visible even for issues not accessible by user
Added by Attila Bognar over 1 year ago.
Updated over 1 year ago.
Description
When time entries are listed for a project, even those are listed that are linked to non-accessible issues (either not accessible because of permissions or because they are private by another user).
- Status changed from New to Closed
- Resolution set to Wont fix
Indeed, but I don't think it is a defect. Time entry visibility is (and has always been) independent of issue visibility. Time entries and issues aren't coupled in any way regarding object visibility.
Instead, time entry visibility depends entirely on the :view_time_entries permission together with the "time logs visibility" role setting that determines if the role can view all or own time entries only.
- Is duplicate of Defect #12287: Time entries of private issues are visible by users without permission to see them added
I can see it but cannot understand the logic behind it (I thought there is no other option because it is evident that the time entries of a non-accessable issue cannot be accessed; why would someone need to see the entries of an issue he cannot see?).
Also available in: Atom
PDF
Updated by 
Updated by