Fix schedule issues permissons

Issue #39 closed
Jóhann B. Guðmundsson created an issue

Users that do not have "Scheduled Issues" view permission on projects ( are not member of group that has been granted System --> Security --> Scheduled Issue ) can create scheduled issues themselves by going to Issues --> create Scheduled Issue

Comments (10)

  1. jost

    Hi Jóhann, Thank you for reporting this bug. We will analyze it. Probably we will attach fix for the next release.

    Regards

  2. Jóhann B. Guðmundsson reporter

    Note there are scalability issues how you have implemented the schedule permissions in general since you have chosen to use "Restriction" as opposed to "Authorize" which means you cannot effectively implement permission management on larger jira instances with users and groups in the thousand

  3. Evangelos Vrocharis

    I agree with Johann. The permissions management need to be on authorize basis not restrict. Because exactly like Johann said, I would have to overhaul the whole permissions system we use. If you get to set who to authorise, I just specify the admins group and I am set. And someone who wants it open to anyone can just set it to be the users group.

    As I said a couple of months back, fix this and we will buy this addon on the spot :)

  4. Eric Levac

    IMHO, the restriction should also apply to limit access to the "schedule" option that is displayed within an issue. Right now it seems even though I can restrict who has access to the "schedule" tab of the project, that same person could create a new schedule with the Schedule button in an issue, potentially causign havoc.

    Thanks!

  5. jost

    Hi,

    We are in the testing phase for the latest version of The Scheduler (3.2.4) which includes a fix for this bug. It should be released in this week.

  6. Bartosz Gilewski

    Hi,

    New version of The Scheduler (3.2.4) is now avalible on Marketplace. Please to try it and let us know if it is working properly now.

    Regards, Bartosz Gilewski

  7. Log in to comment