View Full Version : Permission Bug?
20-01-06, 06:19 PM
Iīve tried to configure a user who can see only the tasks for one project. This was not a problem at all, except one thing which makes it impossible to give an external person an account. By clicking on "tasks per user" in the tasks view he can see all the employees and all tasks for all projects. And because all tasks have Access set to public, he could even edit all the tasks. Is there a setting to set access of a task to Participant?
Is there a solution for this problem or is this realy a security problem?
You can change a task to Participant by changing the task on its description tab.
The seting if for Task Access.
23-01-06, 04:29 PM
Sorry, I didnīt write my question clear enough. Is there a way to set "Participant" as default value? Or is it possible to even delete the possibility to set a tas to "public"? This is realy a Problem because if a lot of people use dotproject, a lot of people will forgett to set their tasks to "Participant".
Your starting point: modules/tasks/ae_desc.php
02-02-06, 09:06 PM
unfortunately this didnīt help. I think this is a bug. I have set all tasks to private. Even then a user who has only acces to one company and one project cann see all tasks if he clicks on 'tasks per user'. So all the security settings are in vain. Is there a solution for this? Or can I avoid somehow, that the users gets the 'tasks per user' link?
03-02-06, 05:29 PM
refer to my solution to the bottom of the page on this link.
03-02-06, 06:46 PM
This works for you? If you click on the 'tasks per user', you can only see the tasks from projects you are allowed to see? It doesn´t matter what settings I use, it doesn´t have anny effect on this. It seems that some more people on the list have the same problem and the only solution right now is to deactivate the ''tasks per user' link for alll users. I hope a solution for this will be found soon.
04-02-06, 06:48 PM
it works, it won't allow you to see any tasks at all basically and says no permission.
I wouldn't say it if it doesn't work...
vBulletin® v3.6.4, Copyright ©2000-2013, Jelsoft Enterprises Ltd.