Re: Missing messages

On Fri, Dec 02, 2022 at 07:42:04AM +0100, Thomas Arendsen Hein wrote:
> 
> I consider the message removing mechanism in Roundup to be
> technically correct, but in reality it is broken:
> 
> There is a "remove" button next to each message, which
> - doesn't ask if the message should actually be removed, it just
>   removes it from the issue without an easy way to undo mistakes.
>   -> Risk of losing (easy access to) data
> - doesn't actually remove the message, just unlinks it from the
>   issue, so if a user posted information that shouldn't be visible
>   in the tracker, it is still there, while the user might believe
>   it has been deleted!
>   -> Risk of sensitive information being stored in the tracker
>      without the user realizing that it is still there
...
> In our trackers we have removed the remove button

We have visibility-rule for messages: A message is viewable (View
permission) only if it is linked to something the user is allowed to
see (same for files). And the creator of a message may see it. Only the
creator of a message and a special role is allowed to link/unlink a
message (and of course for that reason we also have removed the 'remove'
button).

Another reason for this visibility rule is that not every user may view
every message in some of our trackers. Messages may be linked to
different issue-like items. And not for all of those every user may view
all items (an example are it-issues where users typically can see only
their own it-issues except for a role called 'IT').

So my guess is that Tom's original problem stems from an accidental
press of the remove button.

Ralf
-- 
Dr. Ralf Schlatterbeck                  Tel:   +43/2243/26465-16
Open Source Consulting                  www:   www.runtux.com
Reichergasse 131, A-3411 Weidling       email: [email protected]