PDA

View Full Version : Permission Bug?

roland_rf
20-01-06, 06:19 PM
Hi,

Iīve tried to configure a user who can see only the tasks for one project. This was not a problem at all, except one thing which makes it impossible to give an external person an account. By clicking on "tasks per user" in the tasks view he can see all the employees and all tasks for all projects. And because all tasks have Access set to public, he could even edit all the tasks. Is there a setting to set access of a task to Participant?

Is there a solution for this problem or is this realy a security problem?

Best regards
Roland
pedroa
21-01-06, 01:48 AM
You can change a task to Participant by changing the task on its description tab.

The seting if for Task Access.

Pedro A.
roland_rf
23-01-06, 04:29 PM
Sorry, I didnīt write my question clear enough. Is there a way to set "Participant" as default value? Or is it possible to even delete the possibility to set a tas to "public"? This is realy a Problem because if a lot of people use dotproject, a lot of people will forgett to set their tasks to "Participant".

Thanks!

Roland
pedroa
23-01-06, 07:54 PM
Your starting point: modules/tasks/ae_desc.php

Pedro A.
roland_rf
02-02-06, 09:06 PM
Hi,

unfortunately this didnīt help. I think this is a bug. I have set all tasks to private. Even then a user who has only acces to one company and one project cann see all tasks if he clicks on 'tasks per user'. So all the security settings are in vain. Is there a solution for this? Or can I avoid somehow, that the users gets the 'tasks per user' link?

Kind regards
Roland
htemorp
03-02-06, 05:29 PM
refer to my solution to the bottom of the page on this link.

http://www.dotproject.net/vbulletin/showthread.php?t=3085
roland_rf
03-02-06, 06:46 PM
This works for you? If you click on the 'tasks per user', you can only see the tasks from projects you are allowed to see? It doesn´t matter what settings I use, it doesn´t have anny effect on this. It seems that some more people on the list have the same problem and the only solution right now is to deactivate the ''tasks per user' link for alll users. I hope a solution for this will be found soon.
htemorp
04-02-06, 06:48 PM
it works, it won't allow you to see any tasks at all basically and says no permission.

I wouldn't say it if it doesn't work...