Project Manage Accounts -> everybody have access

Get help from other users here.

Moderators: Developer, Contributor

Post Reply
uv_jfuchs
Posts: 13
Joined: 17 May 2019, 11:20

Project Manage Accounts -> everybody have access

Post by uv_jfuchs »

Hi,
I migrate from mantis 1.2.19 to 2.21. Now all users have access to all projects becaus of global access rights.
How can I configure that only users with access to the project can see tickets from the project.

best regards
uv_jfuchs
atrol
Site Admin
Posts: 8366
Joined: 26 Mar 2008, 21:37
Location: Germany

Re: Project Manage Accounts -> everybody have access

Post by atrol »

I am not aware that the upgrade from 1.2 to 2.x does change access rights.
Do you use private or public projects?
Please use Search before posting and read the Manual
uv_jfuchs
Posts: 13
Joined: 17 May 2019, 11:20

Re: Project Manage Accounts -> everybody have access

Post by uv_jfuchs »

Hi,
I use private projects
atrol
Site Admin
Posts: 8366
Joined: 26 Mar 2008, 21:37
Location: Germany

Re: Project Manage Accounts -> everybody have access

Post by atrol »

There is a private project, you don't assign any user to the project, but users are able to access the project.
Is this what you are telling?
Please use Search before posting and read the Manual
uv_jfuchs
Posts: 13
Joined: 17 May 2019, 11:20

Re: Project Manage Accounts -> everybody have access

Post by uv_jfuchs »

Yes.
User is not member of the project but can see tickets in the project.
atrol
Site Admin
Posts: 8366
Joined: 26 Mar 2008, 21:37
Location: Germany

Re: Project Manage Accounts -> everybody have access

Post by atrol »

I am not able to reproduce.

Are you able to provide step by step instructions starting from a fresh install to reproduce the issue?
Please use Search before posting and read the Manual
Naib
Posts: 7
Joined: 06 Aug 2018, 12:41

Re: Project Manage Accounts -> everybody have access

Post by Naib »

Just to track this.

I recently upgraded from 2.16 to 2.20 and I am now experiencing something similar

I have a number of public projects and all members have a global role (viewer) and then each project had different access. However, now all users are aligned to the highest permission across all projects.
atrol
Site Admin
Posts: 8366
Joined: 26 Mar 2008, 21:37
Location: Germany

Re: Project Manage Accounts -> everybody have access

Post by atrol »

@Naib there is a bug in 2.20.0 concerning access rights when changing rights of a user https://mantisbt.org/bugs/view.php?id=25722
But I assume this is not what you are talking about.

Are you able to provide step by step instructions starting from a fresh install to reproduce the issue?
Please use Search before posting and read the Manual
Naib
Posts: 7
Joined: 06 Aug 2018, 12:41

Re: Project Manage Accounts -> everybody have access

Post by Naib »

Hi, I have just come across that bug report and maybe you are right but I would like to try to see if it is related as the discussions do describe the steps more concisely.

I need to convert DB -> Disk for attachment storage and then I was going to just perform an upgrade to see if it is related. If it isn't I will attempt to recreate in my sandbox with a fresh setup
Naib
Posts: 7
Joined: 06 Aug 2018, 12:41

Re: Project Manage Accounts -> everybody have access

Post by Naib »

I have manually applied the stated fix and this solves the problem.

NOTE: I am actually running 2.21.0 and this is present there. redownloading mantisbt-2.21.0.tar.gz and checking core/project_api.php the fix isn't applied there
uv_jfuchs
Posts: 13
Joined: 17 May 2019, 11:20

Re: Project Manage Accounts -> everybody have access

Post by uv_jfuchs »

Hi,
there was a problem with qoutes
old config:
$g_private_project_threshold = 'MANAGER';
Now I change to
$g_private_project_threshold = MANAGER;
and it works.
Only user who are member of the project have access to the project.
Post Reply