Securing a Mantis instance

[kevindrys]

If this topic has already been discussed, I apologize, and please direct me to the discussion and/or documentation outlining this.

We have an internal Linux server which serves as our centralized Mantis server. All Mantis users are internal employees. We have a request to allow people outside the company to access tickets within a specific project. These outside users would only have access to this project.

My question is, how do I ensure that the Mantis instance is securely locked down to not allow these external users access to anything else within that Mantis instance. I would migrate this instance into our DMZ.

Thanks in advance.

Kevin

[atrol]

You have to set the "View Status" of the project to "private".
After that you have to assign individual users to the project.