Re: prevent changing Status for new issues
Stuart McGraw <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.user |
|---|---|
| Message-ID | <[email protected]> |
On 10/04/2014 12:10 PM, Stuart McGraw wrote: >[...] > Yet users with only User role can still set status and resolution to > be anything when creating a new issue. I should also have mentioned... In the default issue.item.html template [*] the status menu is guarded by a <tal:condition="context/id" that causes it to not be shown for new issues. I removed that because ultimately I want to have it shown but disabled. Thus I noticed that context/status/is_edit_ok was true in a new issue allowing user to set value. I am guessing that this means that even if it was hidden as before, a user could hand-craft a url to create a new issue with status set to anything? ---- [*] I renamed the "bug" class to "issue" in the version of the develop templates I am working on. ------------------------------------------------------------------------------ Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk