Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Custom Role not restricting as expected. #3787

Open
creecros opened this issue Mar 23, 2018 · 2 comments

Comments

@creecros
Copy link
Contributor

commented Mar 23, 2018

This software focus on simplicity, the number of features is voluntary limited.

Actual behaviour

I spun up a clean docker v1.21 of kanboard for testing. Created a Custom Role with the following:
image

Applied this project role to a test account, and that account has most of the Actions to edit a task.:
image

They can add files, remove files, comment, remove comments, create links, remove link, etc...Confirmed, the task was not assigned to that user.

Expected behaviour

Applying every restriction should remove all Task editable actions.

Steps to reproduce

Create a custom role, apply all project restrictions.

Screenshots

Made more sense to put screenshots above where I am referring to them.

Configuration

Kanboard version: 1.21
Application version: master.8372202a7c96d53ea6db82fb507db72cee478d72
PHP version: 7.1.15
PHP SAPI: fpm-fcgi
OS version: Linux 4.9.45-rancher
Database driver: sqlite
Database version: 3.21.0
Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36

@creecros creecros changed the title Custom Roles Custom Role not restricting as expected. Mar 23, 2018

@creecros

This comment has been minimized.

Copy link
Contributor Author

commented Mar 23, 2018

It's really the
image

That's not working as expected.

@creecros

This comment has been minimized.

Copy link
Contributor Author

commented Mar 23, 2018

I take that back, I am also able to Duplicate a task:
image
which goes against
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
3 participants
You can’t perform that action at this time.