[ 
http://jira.codehaus.org/browse/CONTINUUM-1866?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=149309#action_149309
 ] 

Wendy Smoak commented on CONTINUUM-1866:
----------------------------------------

I agree that might be confusing.  Two things that come to mind:

 - Only show the queues page on the menu of a 'Continuum Group Project User' or 
above.  That level already has view access to all projects.

 - Filter the names of the projects I shouldn't be allowed to see, and just 
display "Other".  This still exposes the fact that other projects exist on the 
server, but not their names.


> Project group admin should not be able to see projects from other groups in 
> the queues
> --------------------------------------------------------------------------------------
>
>                 Key: CONTINUUM-1866
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1866
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - Security
>    Affects Versions: 1.2
>            Reporter: Wendy Smoak
>            Assignee: Maria Catherine Tan
>             Fix For: 1.2.1
>
>         Attachments: continuum-queues.png
>
>
> As a project group admin for a single group, I have access to the Queues 
> page, and I can see projects from _other_ groups that I do not have access 
> to.  (It does at least grey out the 'cancel' icon so that I can't cancel 
> builds.)
> Either the contents of the Queues page must be filtered so that it only 
> includes my own projects, or it should be removed from my menu.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to