0011322: incorrect rights with only 1 authorized project - MantisBT

MantisBT

View Issue Details [ Jump to Notes ] [ Wiki ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0011322

mantisbt

authentication

public

2010-01-04 08:41

2012-09-23 09:56

Reporter

greno2

Assigned To

dregad

Priority

high

Severity

minor

Reproducibility

always

Status

closed

Resolution

duplicate

Platform

OS

OS Version

Product Version

1.2.0rc2

Target Version

Fixed in Version

Summary

0011322: incorrect rights with only 1 authorized project

Description

When a user has only one project assigned (because all other projects are private) the project-selector/dropdown on the top-right disappears.
If the user has global viewer-rights but ie Admin-rights for the private project he can only act as viewer.

After logo the user is in "all projects scope" with reduced viewer-rights and unable to switch to the project-scope to gain more rights.

Steps To Reproduce

* Create User with only 1 project visible
* set global rights to viewer and project-specific rights to a higher level
* clear cookies (to remove project-selection)
* logon with new user

You should see the wrong (global) right instead of the project-specific right. You are unable to switch to prject-scope.

Additional Information

Workaround:
Create a public "dummy" project to force display of dropdown

Tags

No tags attached.

Relationships

duplicate of	0009826	closed	dregad	Single project user should default to the project, not All Projects
related to	0012673	closed	dregad	User not found in "Assigned to" list
has duplicate	0012008	closed	atrol	User has invalid access level
related to	0014268	acknowledged		"Report Issue" is missing if the user has access to only private projects, but has not selected a project from the dropdown.

Notes
(0032322) atrol (developer) 2012-07-13 06:51	Another workaround for this is to use page "My Account" > "Preferences" and to change "Default Project" from "All Projects" to the one assigned project

(0032838) dregad (developer) 2012-09-13 10:36	This should be resolved with the fix committed for 0009826

Issue History
Date Modified	Username	Field	Change
2010-01-04 08:41	greno2	New Issue
2012-07-13 06:51	atrol	Note Added: 0032322
2012-07-13 06:51	atrol	Relationship added	related to 0012673
2012-07-13 07:13	atrol	Relationship added	related to 0014268
2012-07-13 07:18	atrol	Relationship added	has duplicate 0012008
2012-09-13 10:36	dregad	Note Added: 0032838
2012-09-13 10:36	dregad	Relationship added	duplicate of 0009826
2012-09-13 10:36	dregad	Status	new => resolved
2012-09-13 10:36	dregad	Resolution	open => duplicate
2012-09-13 10:36	dregad	Assigned To	=> dregad
2012-09-23 09:56	atrol	Status	resolved => closed

MantisBT 1.2.16dev master-1.2.x-8c2bd07 [^]

Copyright © 2000 - 2013 MantisBT Team

Time: 0.1253 seconds.
memory usage: 2,797 KB