View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0013871 | mantisbt | administration | public | 2012-02-09 04:46 | 2012-02-09 06:13 |
Reporter | JanHegewald | Assigned To | |||
Priority | normal | Severity | minor | Reproducibility | always |
Status | new | Resolution | open | ||
Product Version | 1.2.8 | ||||
Summary | 0013871: manage_project_threshold was not working on a per-project base | ||||
Description | The configuration switch 'manage_project_threshold' was not working on a per-project base. This means, that if you configure 'manage_project_threshold' = 'MANAGER' in config_inc.php and 'manage_project_threshold' = 'ADMINISTRATOR' at configuration page for some projects, a user with access level 'MANAGER' also had access to manage the project. | ||||
Steps To Reproduce |
| ||||
Additional Information | A fix for this is the following: remove the line $t_manage_project_threshold = config_get( 'manage_project_threshold' ); from manage_proj_page.php (line 94 in my installation) and add the line $t_manage_project_threshold = config_get( 'manage_project_threshold', null, auth_get_current_user_id(), $t_project_id ); just below (line 111 in my installation) $t_project = array_shift( $t_projects ); With this change the project where 'manage_project_threshold' = 'ADMINISTRATOR' is configured is not shown for a user with access level 'MANAGER' on manage projects page. | ||||
Tags | No tags attached. | ||||