Portal customer can close a ticket without "Close issues" project permission

XMLWordPrintable

    • 1
    • Severity 3 - Minor

      Issue Summary

      Even if remove "Service Project Customer - Portal Access " from "Close issues" project permission and set the workflow transition validator to "Only users with Close Issues permission can execute this transition.", portal customer can close a ticket.

      Service Project Customer - Portal Access

      Steps to Reproduce

      1. Remove "Close issues" project permission from all user include "Service Project Customer - Portal Access"
      2. Add to validator( Permission Validator ) to transition for "Close issues" to test project's workflow
        1. don't forget to check the box "Show transition in the customer portal " on the transition.
        2. click the "Show transition labels" -> click the transition -> put check box "Show transition in the customer portal "
      3. Try to close the ticket both on portal by Customer and issue view by agent
      4. Portal customer will be able to close the ticket but agent will get error like as below
        "User 'ug:3ebe5789-9a1a-4226-9e35-7f83zzzz' doesn't have the 'Close Issues' permission"
        

      Expected Results

      Portal customer should not be able to close issues.

      Actual Results

      Portal customer is able to close issues.

      Workaround

      Hide close transitions in the customer portal

              Assignee:
              Unassigned
              Reporter:
              K.Kitajima
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: