#3289: only users with TICKET_MODIFY permission should change ticket owner or be
assignable to tickets (restrict_owner)
---------------------------+------------------------------------------------
Reporter: wkornew | Owner: cmlenz
Type: defect | Status: new
Priority: normal | Milestone: 0.10
Component: ticket system | Version: 0.9.5
Severity: normal | Keywords:
---------------------------+------------------------------------------------
Currently, TICKET_CHGPROP allows for changing the assigned user or
accepting a ticket, but this operation belongs to the planning process and
thus should be restricted to TICKET_MODIFY. This also means that
restrict_owner should only show users with TICKET_MODIFY permission.
--
Ticket URL: <http://projects.edgewall.com/trac/ticket/3289>
The Trac Project <http://trac.edgewall.com/>
_______________________________________________
Trac-Tickets mailing list
[email protected]
http://lists.edgewall.com/mailman/listinfo/trac-tickets
