On 29-Aug-07, at 3:44 PM, Shawn Hill wrote:

> Thanks for the prompt reply!
>
> The issue was indeed with the access levels, however, I was  
> changing them in the config_inc.php and even trying the  
> config_defaults_inc.php to no avail.  I then remembered that the  
> config options have been moved into the database and I set the  
> options there and voile' it works so thanks for pointing me in the  
> right direction.
>
> What would be the best practice to ensure consistency in my  
> configuration going forward, i.e. some settings in the DB and some  
> in the config_inc.php?  Furthermore, which settings take preference  
> is the order as follows;
> 1.  config_inc.php
> 2.  database
> 3.  config_defaults_inc.php

   Actually, it's:
1. database
2. config_inc.php
3. config_defaults.php

   You shouldn't be editing config_defaults.php, as this file will be  
replaced when the package is updated. Global changes for all projects  
should be made in config_inc.php, although global settings are also  
available in the database. Not all settings have a GUI to adjust them  
in the database.

    ... Glenn

>
>
>
>
> On 8/29/07, Gianluca Sforna <[EMAIL PROTECTED]> wrote: On 8/29/07,  
> Shawn Hill <[EMAIL PROTECTED]> wrote:
> > Hello,
> >
> > I have installed 1.1.0a4 and I have found that any user can can  
> edit any
> > other users notes.  This is of quite concern to me.  How do I go  
> about
> > trying to resolve this one?
>
> Reading the relevant code in bugnote_view_inc.php, the edit note
> button is supposed to be shown:
>
> 1. if the current user access level is above
> "manage_project_threshold" (default: MANAGER)
> 2. if the current user is the note author (but only if
> $g_bugnote_allow_user_edit_delete is ON)
> 3. if the current user access level is above
> "update_bugnote_threshold" (default: DEVELOPER)
>
> If you witness a behavior not consistent with this, you should open a
> report in http://www.mantisbt.org/bugs, along with any relevant
> information you may have (for instance, the value of the above
> configuration variables and the access level of the users)
>
> ---------------------------------------------------------------------- 
> ---
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a  
> browser.
> Download your FREE copy of Splunk now >>   http://get.splunk.com/
> _______________________________________________
> mantisbt-help mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/mantisbt-help
>
>
>
> -- 
> [EMAIL PROTECTED]
> ---------------------------------------------------------------------- 
> ---
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a  
> browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/ 
> _______________________________________________
> mantisbt-help mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/mantisbt-help

-- 
Glenn Henshaw                     Logical Outcome Ltd.
e: [EMAIL PROTECTED]     w: www.logicaloutcome.ca
Mantis Developer and User




-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
mantisbt-help mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mantisbt-help

Reply via email to