View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0025935||mantisbt||attachments||public||2019-07-18 19:08||2019-12-09 04:32|
|Priority||normal||Severity||minor||Reproducibility||have not tried|
|Target Version||2.23.0||Fixed in Version||2.23.0|
|Summary||0025935: Warning for users when making public notes with attachments private|
Currently, there is no support for private attachments. Users are successfully blocked from adding attachments to private notes. However, if a user wishes to retrospectively make a public note with an attachment private, the note becomes private but the attachment remains public. This is particularly problematic as the attachment appears to the user to be private but is in fact not.
I understand that there are already issues 0022817 & 0009802 open to address support of private attachments but in the interim, there should be a warning to users that the attachment will become public since this has the potential to expose sensitive information.
|Steps To Reproduce|
|Tags||No tags attached.|