This only happens when you have "All Projects" selected.

Example: I'm a reporter at this site, but when I select "All projects" (which actually is just one (mantisbt), as far as I know); I can see the Summary for "mantisbt" and "mantisbt-dev"; while "mantisbt-dev" is none of my bussiness.

I'd like to use the bugtracker for multiple clients, but they do not need to know which other projects I'm working on.

Same thing with a fresh user who just signed-in (and has no projects at all, since there are only private ones). On the summary page he gets information he should not get.

I agree. I also see this as a quite serious problem.

This needs to be fixed, and hence I marked it as confirmed. However, the quick fix at the moment is to higher the threshold needed to access the summary. In a lot of cases a normal reporter does not need to see the summary.

Hi All!

We had the same problem. A temporary solution was the adding of a global level check if the current user has developer rights or not.

but we still have the problem with the summary page...

greetings

core/print_api.php

function print_project_option_list( $p_project_id = null, $p_include_all_projects = true ) {
$t_project_ids = current_user_get_accessible_projects();
if ( $p_include_all_projects && access_has_global_level(DEVELOPER) ) {
// edited by sck 2003-12-15, added global level-check
echo '<option value="' . ALL_PROJECTS . '"';
check_selected( $p_project_id, ALL_PROJECTS );
echo '>' . lang_get( 'all_projects' ) . '</option>';
}

Summary shows only info about projects that are assigned to this user.