Scheduled Task Notifications sent to all users with "receive system emails" on

[crystalenka]

Steps to reproduce the issue

1. Create several users from various user groups. Make sure "receive system emails" is on and that the user groups do not have access to the scheduled tasks component.
2. Create a scheduled task.
3. Set all task notifications to on.
4. Trigger the task.

Expected result

Only users with permissions to access the scheduled task component receive the notification email.

Actual result

All users with 'receive system emails' turned on receive notifications, regardless of permissions.

System information (as much as possible)

PHP 8.1, J4.2.5

Additional comments

Ideal solution would be to define which user groups get notified on a per-task level, maybe in the task permissions (because different people may need to handle different errors).
Otherwise, either via component permissions or by selecting user groups in component options.
Default should be super users only.

[brianteeman]

The same fundamental issues with task notifications are present with workflow notifications

#37746, #37745, #37743, #37422

[brianteeman]

are you offering to help or are you going to keep commenting from the sidelines and telling everyone else what to do

[ReLater]

Whats wrong in commenting for the sake of commenting?

1. This is not a forum, but an issue tracker.
2. It does not help anyone.
3. Volunteers work when they want to, can and have time.

@wojtekxtx , get started!

[alikon]

as I believe that I'm one of the few that use scheduled tasks, heavily on the wild,
I always Set:
all task notifications to off...
cause , there are far more better tools to be notified

so can you clarify a little bit better your use case ?

cause to me this is not a bug
is a nice to have

[crystalenka]

I use scheduled tasks for a few things on my client sites. Since I manage quite a few of them, and some of these scheduled tasks are site-specific, I like it when it lets me know when there is a failure.

However, as they are client sites, they also have user accounts. Most do not have or need system notifications on. Some have apparently accidentally turned it on and now get emails from failed scheduled tasks even though they have no access to even see the component.

This is not a nice to have, this is a flaw with how the system is set up. People who cannot see scheduled tasks should not be able to get notifications about them.

[crystalenka]

Also it's less about how you personally use it and more about "Joomla offers this feature therefore it should work well in core".

[chmst]

get emails from failed scheduled tasks even though they have no access to even see the component.

Did you check the users permissions in the permissions view? Like that?

Maybe the user don't see the component in the menu, but have full manager permission. Then the condition
would be true.

[crystalenka]

So here's an interesting discrepancy.

Component settings are all denied, but task settings apparently don't inherit from the component settings?

[chmst]

I am not sure, but there could be a reason for these notifications.