• Status Closed
  • Percent Complete
  • Task Type Bug Report
  • Category User Interface
  • Assigned To No-one
  • Operating System All
  • Severity Low
  • Priority Very Low
  • Reported Version 1.0-rc
  • Due in Version Undecided
  • Due Date Undecided
  • Votes
  • Private
Attached to Project: Flyspray
Opened by protonotarios - 25.10.2016
Last edited by peterdd - 25.10.2016

FS#2302 - Private Flyspray reveals project names

I have a Flyspray with all projects set to private. If an anonymous visitor types a taskid in search box, they get a 102 “no permission” error but the page title will change to that task’s project name.

Closed by  peterdd
25.10.2016 20:49
Reason for closing:  Implemented in devel

I made 2 small commits now on github. Please test with github master if this solves the problem.


No taskid search. And if I try a manual url like "..../index.php?do=details&task_id=123" I get a 102 “no permission” error but with no project name. Instead, the "All projects" title disappears.


Available keyboard shortcuts


Task Details

Task Editing