View Issue Details

IDProjectCategoryView StatusLast Update
0024932mantisbtpreferencespublic2019-01-02 17:25
Reporterdynasoft Assigned Toatrol  
PrioritynormalSeveritytweakReproducibilityalways
Status closedResolutionfixed 
Product Version2.18.0 
Target Version2.19.0Fixed in Version2.19.0 
Summary0024932: "Manage" menuitem visible even though no access
Description

Hi There

On our installation, as a "Reporter"-User, I can see the "Manage" menuitem in the left menubar. When I click on it, the page "access denied" shows.
Only "Manager" can edit projects and users, so this menuitem can be hidden for reporters (like it is on this mantisbt here). How can I control that?

thanks a lot

TagsNo tags attached.

Activities

atrol

atrol

2018-11-04 06:07

developer   ~0060913

@dynasoft I assume this happens in your case as the affected user has rights to manage a certain project which is not the one that is selected at the moment,
I assume you will see the project if you choose All Projects in project selection.

I will provide a fix for this.

atrol

atrol

2018-11-04 06:34

developer   ~0060914

PR https://github.com/mantisbt/mantisbt/pull/1405

dynasoft

dynasoft

2018-11-04 07:41

reporter   ~0060915

@atrol
You nailed it. Error Massage only appears when a Project is selected where i have no MANAGER access. Either hiding the Menu or showing an advise to change the project-state to "all projects" would be nice. But for now i what I'm up to, thanks!

Related Changesets

MantisBT: master 739d57c5

2018-11-04 01:10

atrol


Details Diff
Fix wrong display of Manage button

Do no longer offer the "Manage" button if user does not have
manage_project_threshold rights for the currently selected project.

Fixes 0024932
Affected Issues
0024932
mod - core/layout_api.php Diff File