Upgrad, can view without loggin in

[pribis]

I just upgraded our mantis to 1.2.11 on FreeBSD 7.4-RELEASE-p9 .

Suddenly users can view tickets without logging in. They can't add to or change status, but still, we don't want people able to do this. How do I turn this off?


$g_allow_anonymous_login = OFF;
$g_anonymous_account = '';

is the only thing I can find, but that is the way it should be.

Thanks.

brian

[atrol]

Are your projects set to "public" or "private"?

[pribis]

Are your projects set to "public" or "private"?

Thanks atrol. Strangely enough having them set to public, users were still forced to log in on the version I had installed. Must be something that was fixed in this last upgrade. I set them to private and everything is good.

b--

[pribis]

Ok, so I made them private, but now I have to go through every user and/or project and add users to that project in order for them to do anything at all. What in the world happened. Previously public allowed users who were reporters to login and report bugs on that project without being specifically assigned to it. However, they could not view anything until they logged in. The upgrade changed all that. All of a sudden everyone could view tickets. It is going to be a pain if I have to go through all the users and add them to projects (we have quite a few of them). Is there an easier way to do this? i.e., is there a way to mark a project as public so any user can work with that project, even if not assigned to it, but not allow anyone to see the bug reports without logging in first?

[pribis]

Never mind. I went through each project and added everyone to it. Seems from what I read that this is the only way to give every registered users access to at least see the bugs while not allowing the rest of the known world the ability to see them.