View Issue Details

IDProjectCategoryView StatusLast Update
0007197mantisbtadministrationpublic2009-06-26 14:30
Reporterredcom Assigned Todhx  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionduplicate 
Product Version1.0.3 
Summary0007197: Some project admins do not have access to the manage link when clicking
Description

In our installation a user has developer access to the site, but in a specific project they have administrative access, and when cling on the manage link, they get taken to an access denied. Another user with the same access level and an Admin of another project works fine.

Additional Information

The first user's project was created after upgrading to the CVS snap shot from June 13, 2006, the second was from March snapshot.

TagsNo tags attached.

Relationships

duplicate of 0006481 closeddhx Managers cannot get to users management page 

Activities

redcom

redcom

2006-06-14 11:41

reporter   ~0012961

It seems that the link "Manage" should take the project admins to manage_proj_page.php and global admins should be taken to manage_user_page.php

kwilliams

kwilliams

2006-11-13 08:16

reporter   ~0013717

This still appears to be a problem in 1.0.6.

The user that is denied access when a SPECIFIC project is currently selected (i.e. the project to which they are assigned as "administrator").

A workaround, as mentioned in a Dec 2005 report of this issue, is to select "All Projects" first, then "Manage", and then select the specific project.

rodzilla

rodzilla

2007-06-12 13:39

reporter   ~0014747

The manage link seems to point to manage_user sometimes, and manage_proj sometimes. The function print_menu in html_api calls access_has_project_level( ADMINISTRATOR ), which when true points it to manage_user.

It is returning true inappropriately, though-- my manage users threshold is ADMINISTRATOR.

My problem is that for MANAGERs it sometimes points to manage_user... Maybe there should just be additional logic that takes the manage user threshold into account in the manage user threshold? I'll give it a try.

rodzilla

rodzilla

2007-06-12 15:36

reporter   ~0014748

Okay, in html_api.php, the logic that decides how to print that link hinges around whether a user has admin priviledges on a project basis-- then prints the manage_user_page.php link if they do. This does not work, though, in cases where the manage_project_threshold is one thing but the manage_user_threshold is another.

I changed that logic to check the user privilege level agains the manage_user_threshold-- if it's less, it goes to the next bit of logic that will print the manage_proj_page.php link. I also changed the print_bracket_link to check for privileges that way. Seems to make sense... no?

exk72

exk72

2007-06-13 02:17

reporter   ~0014753

Does this fix it?

http://www.mantisbt.org/forums/viewtopic.php?t=2716