Forum GLPI-Project

cirtaz

Member

Registered: 2018-02-13

Posts: 25

Problem with profile rights

There is a profile manager with limited rights. This profile does not have the ability to view personal tasks and comments, only public ones.

Create tasks and comments

When viewing in ticket information, everything is correct. All personal tasks and comments are hidden for viewing.

If you go to the Assistance -> Ticket and add a task-description field, the user can view personal tasks, despite the profile restrictions

Installed glpi 9.4
P.S. In 9.3.3 this way can also view personal comments.

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Problem with profile rights

your screen shot are not visibles

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

cirtaz

Member

Registered: 2018-02-13

Posts: 25

Re: Problem with profile rights

Sorry but i don't know how i can edit my topics on forum

cirtaz

Member

Registered: 2018-02-13

Posts: 25

Re: Problem with profile rights

There is a profile manager with limited rights. This profile does not have the ability to view personal tasks and comments, only public ones.

Create tasks and comments

When viewing in ticket information, everything is correct. All personal tasks and comments are hidden for viewing.

If you go to the Assistance -> Ticket and add a task-description field, the user can view personal tasks, despite the profile restrictions

Installed glpi 9.4
P.S. In 9.3.3 this way can also view personal comments.

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Problem with profile rights

Who is logged? the author of private task?

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

cirtaz

Member

Registered: 2018-02-13

Posts: 25

Re: Problem with profile rights

Logged by user Manager. User glpi is the author of tasks

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Problem with profile rights

And task is affected to user Manager? or to one group of user Manager?

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

cirtaz

Member

Registered: 2018-02-13

Posts: 25

Re: Problem with profile rights

The task was created by the user glpi and assigned to the user glpi. user manager cannot see personal tasks in the ticket and this is normal, as the profile does not have viewing rights. Moreover, if you login as a manager and add a column with a description of the task, he will see personal tasks.

cirtaz

Member

Registered: 2018-02-13

Posts: 25

Re: Problem with profile rights

For example, created a test ticket on https://demo.glpi-project.org/front/tic … php?id=998. Tasks and comments created by the user admin and appointed admin. Then I login under the normal user (he cannot view personal tasks and comments) and in the assistance ticket added a column task description and a followup description

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Problem with profile rights

I confirm the bug for ticket tasks: https://github.com/glpi-project/glpi/issues/5587

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

cedric-anne

Administrator

Registered: 2018-07-02

Posts: 85

Re: Problem with profile rights

Hi,

I made a fix proposal here: https://github.com/glpi-project/glpi/pull/5595

cirtaz

Member

Registered: 2018-02-13

Posts: 25

Re: Problem with profile rights

Everything works fine. Thanks!