mirror of
https://github.com/redmine/redmine.git
synced 2026-05-06 07:55:50 +02:00
Check view watchers permission when copying issues (#40946).
Patch by Jens Kraemer (@jkraemer). git-svn-id: https://svn.redmine.org/redmine/trunk@22914 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
@@ -1498,6 +1498,8 @@ class IssueTest < ActiveSupport::TestCase
|
||||
user2 = User.find(3)
|
||||
issue = Issue.find(8)
|
||||
|
||||
User.current = user
|
||||
|
||||
Watcher.create!(:user => user, :watchable => issue)
|
||||
Watcher.create!(:user => user2, :watchable => issue)
|
||||
|
||||
@@ -1511,6 +1513,24 @@ class IssueTest < ActiveSupport::TestCase
|
||||
assert !issue.watched_by?(user2)
|
||||
end
|
||||
|
||||
def test_copy_should_not_copy_watchers_without_permission
|
||||
user = User.find(2)
|
||||
user2 = User.find(3)
|
||||
issue = Issue.find(8)
|
||||
|
||||
Role.find(1).remove_permission! :view_issue_watchers
|
||||
User.current = user
|
||||
|
||||
Watcher.create!(:user => user, :watchable => issue)
|
||||
Watcher.create!(:user => user2, :watchable => issue)
|
||||
|
||||
issue = Issue.new.copy_from(8)
|
||||
|
||||
assert issue.save
|
||||
assert issue.watched_by?(user)
|
||||
assert !issue.watched_by?(user2)
|
||||
end
|
||||
|
||||
def test_copy_should_clear_subtasks_target_version_if_locked_or_closed
|
||||
version = Version.new(:project => Project.find(1), :name => '2.1')
|
||||
version.save!
|
||||
|
||||
Reference in New Issue
Block a user