ChiliProject is not maintained anymore. Please be advised that there will be no more updates.
We do not recommend that you setup new ChiliProject instances and we urge all existing users to migrate their data to a maintained system, e.g. Redmine. We will provide a migration script later. In the meantime, you can use the instructions by Christian Daehn.
Permissions are only checked for top level menu entries (Bug #758)
Description
When rendering menu items only the items with actions that the user is allowed to access should be rendered. Due to a bug in the MenuHelper the permission check is only done for top level menu items. Second level menu items, like e.g. the "New issue" item in the project menu are rendered without a permission check.
Associated revisions
Support WikiCaps for Trac migrations
Trac wikis support WikiCaps for links to pages. They also use
!WikiCaps syntax to prevent links. Support both.
Uses patch from and closes #758.
git-svn-id: http://redmine.rubyforge.org/svn/trunk@1242 e93f8b46-1217-0410-a6f0-8f06a7374b81
History
Updated by Stephan Eckardt at 2011-12-08 02:09 pm
I have a fix for this bug on github:
https://github.com/finnlabs/chiliproject/tree/feature/2.4.0/fix_permission_check_for_menu_items