Flyspray - The bug killer!

  • Status Planned
  • Percent Complete
    80%
  • Task Type Feature Request
  • Category Backend/Core
  • Assigned To No-one
  • Operating System All
  • Severity Low
  • Priority Very Low
  • Reported Version 0.9.9.7
  • Due in Version 1.1 devel
  • Due Date Undecided
  • Votes
  • Private
Attached to Project: Flyspray - The bug killer!
Opened by Jordan Mendler - 27.02.2013
Last edited by Jouni Ahto - 22.04.2015

FS#1836 - Need permission option to view only own tasks

In global permissions there is 'View tasks'. This makes it so a user can view all tasks. Need a way instead that they can view only their own tasks, for example a permission called 'View own tasks'.

If 'View own tasks' is checked for a user, in the project list we should only show projects which contain tickets that that user is a part of. Within a given project we should then only show tickets that the user is a part of if they have that permission set.

So for example if 'View tasks' is set, show user all tasks. 'View tasks' is not set, but 'View own tasks' is set then show them only their own tasks and projects.

Admin
Jordan Mendler commented on 18.03.2013 02:19

Any status update here?

Jouni Ahto commented on 12.03.2015 18:17

Need to think about what exactly is considered "own task". Maybe these ones, maybe a few more or less. Comments?

  • task that the user reported
  • task that someone assigned to the user
  • task that belongs to a category having as default owner the user, even if it's assigned to someone else

There are a lot of places to go through to get this implemented. A tasks subtasks, parent task, dependent tasks, related tasks etc, those ones shouldn't be shown in a tasks description either in this case. Probably have to write a new method to class.user.php, can_see_task($task) and make sure that all the information needed for the check is available, either in user, task or both.

Jouni Ahto commented on 13.03.2015 09:44

Oh, there already exists method can_view_task... I'll at least add the missing permission field immediately, but can't promise that it'll work as expected in 1.0.

Jouni Ahto commented on 13.03.2015 12:40

In fact, this can be finished already in 1.0 with the exception of project list. I've got it already working. Just have to check that method can_view_task really is used in all the necessary places.

FS#1950 might have to be solved first, there's sometimes a little bit of confusion about which permission actually get's applied.

Jouni Ahto commented on 13.03.2015 16:32

Got this one mostly implemented and tested. Will be in 1.0 if the other ones accept a new feature this late.

Project Manager
Psychokiller1888 commented on 14.03.2015 14:20

1.0 is waiting since 2012, so I think it can even wait for a bigger feature if needed... As long as we don't postpone to 2016 lol

Jouni Ahto commented on 22.04.2015 18:45

Mostly implemented. Showing only projects where the user has open tickets or is part of it would need actually checking it when creating the project list. Might make Flyspray totally unusable if there are a lot of tasks, projects and users. Have to think about this a bit more. It might also conflict with our permission system, where a user is allowed see a project, if he/she is allowed to see some tasks in it (but in 1.0, not all of them). Keeping this one open, but moving due in version into future (if I'm allowed), so it doesn't show in roadmap for 1.0.

Loading...

Available keyboard shortcuts

Tasklist

Task Details

Task Editing