#4320 Add users to private tickets

unreleased
open
nobody
General
nobody
2015-03-10
2012-06-01
No

After [#3892] is done, there should be a UI to add another user to have permission to read a private ticket. Someone with 'edit' permission on a ticket should be able to add the additional users.

I believe private tickets are implement with an artifact-level ACL, not merely a boolean flag, so the backend support should be correct. However, we should double check that the ACL is used in all relevant permission checks, so it works fully.

Related

Tickets: #2298
Tickets: #3892

Discussion

  • Dave Brondsema

    Dave Brondsema - 2012-06-01
    • labels: support --> support, for-support
     
  • Dave Brondsema

    Dave Brondsema - 2012-06-01
    • size: --> 2
    • milestone: forge-jun-29 --> forge-jun-15
     
  • Dave Brondsema

    Dave Brondsema - 2012-06-15
    • milestone: forge-jun-29 --> forge-jul-13
     
  • Dave Brondsema

    Dave Brondsema - 2012-06-29
    • labels: support, for-support --> support, for-support, hostedapps
     
  • Dave Brondsema

    Dave Brondsema - 2012-07-13

    Notes on how 'private' currently works:

    5:54:34 PM Dave: the private flag controls read access fairly well
    5:54:45 PM Dave: but anybody that can edit a ticket can change that flag
    5:56:01 PM Tim Vansteenburgh: we've never needed for it to be otherwise
    5:56:39 PM Dave: it is odd though.  since we allow *auth to edit tickets, any user can go turn one of our tickets to be private
    5:57:37 PM Dave: it's also the Developer group that gets to read all private tickets
    
     
  • Dave Brondsema

    Dave Brondsema - 2012-07-13

    'Edit' is just recently a separate permissions, which helps some.

     

Log in to post a comment.