#3643 (Anon users can use Assign to: radio buttons... )

by tonis · in Developers · assigned to tonis

6 Jahre, 5 Monate ago von tonis about #3643 (Anon users can use Assign to: radio buttons... ) : Fixed by adding: def get_action_permission(self, ar, obj, state): return not ar.get_user().is_anonymous to the action.
However it is a bit disturbing how lino ran the action to run_from_ui from an anon user. I feel by default if users plugin is enabled, the default mode should set a allow_anon...
6 Jahre, 5 Monate ago von tonis about #3643 (Anon users can use Assign to: radio buttons... ) : Seems that the action doesn't even register with the changes table. I have the feeling the fix is just a check for if the user has write permissions to the row and the cell isn't disabled. Should be fixed soon...
6 Jahre, 5 Monate ago von tonis about #3643 (Anon users can use Assign to: radio buttons... ) : Simply log out, goto hobbit.saffre-rumma.net/#/api/tickets/Tickets/3643 and you can assign the ticket to any of the choices.
6 Jahre, 5 Monate ago von Luc Saffre about #3643 (Anon users can use Assign to: radio buttons... ) : Sounds interesting. Please show me this problem.