Defect #37187
closed
no-permission-check allows issue creation in closed/archived projects
Added by Felix Schäfer over 4 years ago.
Updated over 4 years ago.
Description
Setting --no-permission-check in the mail receiver allows creating issues and probably other objects in closed and archived projects. This is probably not what this option is intended for.
Files
We will work on a patch and submit it here.
The attached patch adds 2 tests demonstrating the problem when sending an email that would created a new issue. The patch also contains a proposed fix.
- Target version set to 4.2.7
Setting the target version to 4.2.7.
Thank you. We are currently working on another patch that would introduce a different Error class for this case. This would be useful for plugins that need to differentiate between "this is not possible in that project" and "this is not possible for this user".
Updated by 
Updated by