Modify ↓
Opened 17 years ago
Closed 11 years ago
#1994 closed defect (wontfix)
Edit Report on another users report with TRAC_ADMIN privs misdirects to your report
Reported by: | Jeffrey Hulten | Owned by: | Noah Kantrowitz |
---|---|---|---|
Priority: | normal | Component: | PersonalReportsPlugin |
Severity: | normal | Keywords: | |
Cc: | Trac Release: | 0.10 |
Description
To repro:
- Create two users, both with REPORT_PERSONAL priv, one with TRAC_ADMIN priv.
- Create a report as the non-admin user.
- View the report as the admin user.
- Click the Edit Report button.
- See that it gives you the admin users report, not the non-admin users report.
I suspect that (far more dangerously) delete works the same way.
Attachments (0)
Note: See
TracTickets for help on using
tickets.
This plugin is deprecated. Please see the PrivateReportsPlugin for a replacement