MantisBT

View Issue Details Jump to Notes ] Wiki ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0004161mantisbtrelationshipspublic2004-07-21 07:392004-08-29 02:10
Reportervboctor 
Assigned Tomasc 
PrioritynormalSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version0.19.0a2 
Target VersionFixed in Version0.19.0rc1 
Summary0004161: Relations to private issues must only appear to user with appropriate access level
DescriptionIf a public issue is linked to a private one, and a user with only access to view public ones, the relations section shows the issue id of the private issue but not the status or the summary. In this case the relationship should not appear at all.

Ideally, the history should also not show this relation, but that is not possible with the current implementation of history (so I would treat this as a different issue since it also applies to issue like private notes, ...etc.)
TagsNo tags attached.
Attached Fileszip file icon relationship_api_4161_4146_patch.zip [^] (4,577 bytes) 2004-07-29 12:25

- Relationships
has duplicate 0004290closedjlatour Displaying hidden issues on relationships list 

-  Notes
User avatar (0006208)
masc (developer)
2004-07-21 07:59

Victor,
I'm sure this is the right solution. Although the related bug is private, the relationship exists. So I list the relationship because it's present, but with no information because the user can't have access (the meaning is "there is a relationship but you are not grant to access to it").
If you prefer I can easly implement your proposal hidding the line.
User avatar (0006209)
vboctor (administrator)
2004-07-21 08:21

"private" things (whether notes / relationships) are not to be visible (even in terms of existence, not just contents) to users without the appropriate access level. This is part of the privacy of being private! Also your current solution may be confusing to some users (for example, see last note in 0003948).
User avatar (0006213)
masc (developer)
2004-07-21 08:42

Now it's clear. I'm going to update the API.
User avatar (0006216)
masc (developer)
2004-07-21 10:12

Fixed. See patch attached. The relationship line is skipped if the user is not grant to view the related bug

- Issue History
Date Modified Username Field Change
2004-07-21 07:39 vboctor New Issue
2004-07-21 07:59 masc Note Added: 0006208
2004-07-21 08:21 vboctor Note Added: 0006209
2004-07-21 08:42 masc Note Added: 0006213
2004-07-21 10:11 masc File Added: relationship_api_fix.zip
2004-07-21 10:12 masc Note Added: 0006216
2004-07-29 12:23 masc File Deleted: relationship_api_fix.zip
2004-07-29 12:25 masc File Added: relationship_api_4161_4146_patch.zip
2004-08-02 06:01 vboctor Status new => resolved
2004-08-02 06:01 vboctor Fixed in Version => 0.19.0rc1
2004-08-02 06:01 vboctor Resolution open => fixed
2004-08-08 09:31 jlatour Relationship added has duplicate 0004290
2004-08-29 02:10 vboctor Status resolved => closed


MantisBT 1.2.16dev master-1.2.x-8c2bd07 [^]
Copyright © 2000 - 2013 MantisBT Team
Time: 0.1126 seconds.
memory usage: 2,804 KB
Powered by Mantis Bugtracker