---
** [tickets:#7560] Avoid weird permissions when anonymous creates a private
ticket**
**Status:** closed
**Milestone:** asf_release_1.2.0
**Labels:** ux bitesize 42cc
**Created:** Thu Jul 10, 2014 06:08 PM UTC by Dave Brondsema
**Last Updated:** Sun Nov 02, 2014 09:13 PM UTC
**Owner:** Igor Bondarenko
In the `_set_private` method, the creator of a ticket gets read rights to the
ticket. But if that is an anonymous user, then the ticket is readable by
everyone. To avoid that situation altogether, we could prompt them if they try
to mark as private, and notify that they will need to login to make a private
ticket.
---
Sent from forge-allura.apache.org because [email protected] is subscribed
to https://forge-allura.apache.org/p/allura/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is
a mailing list, you can unsubscribe from the mailing list.
