View Issue Details

IDProjectCategoryView StatusLast Update
0004589mantisbtadministrationpublic2005-04-18 10:22
Reportermrog Assigned Tothraxisp  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Product Version0.19.0 
Fixed in Version1.0.0a1 
Summary0004589: Administrator cannot manage projects to which he/she is assigned.
Description

Steps to recreate:

1) Log in as an administrator.
2) Create a private project.
3) Go to Manage Users and click your user name.
4) Assign yourself to the new project.
5) Attempt to manage the new project. It will not be allowed.

TagsNo tags attached.

Relationships

related to 0005254 closedthraxisp A Project is missing in adminstration menu 
child of 0004937 closedvboctor Mantis 1.0.0a1 Release 

Activities

epu

epu

2005-03-14 18:42

reporter   ~0009533

As a user with global adminstrator access, if I am added as a developer on a public project I can't administer it. In file core/html_api.php, link visibility is controlled by function access_has_project_level. This function needs to consider global management / administration priviledges.

thraxisp

thraxisp

2005-04-04 21:20

reporter   ~0009708

I think that this is design intent.

An administrator can't be demoted. You really don't want to be able to override an administrator's access. If we did, it would be possible to orphan control of the project.

mrog

mrog

2005-04-06 13:01

reporter   ~0009753

The point of the bug report is that the administrator IS being demoted. By assigning the administrator to the project, the administrator loses access to the project.

This might be the same issue as bug 0005254.

thraxisp

thraxisp

2005-04-07 18:45

reporter   ~0009764

Fixed in CVS.

  • removed project assignment from page when user is an administrator
  • fixed access check to use global administrator as an override

manage_user_edit_page.php -> 1.13
core/access_api.php ->1.42