MantisBT - TestLink
View Issue Details
0008923TestLinkInventory / Platformspublic2020-05-19 17:292020-05-19 19:33
atisne 
fman 
normalminoralways
resolvedfixed 
1.9.20 
1.9.20_fixed 
Postgresql 9.6
READY FOR TESTING
0008923: Plaforms still visible even if we don't have required permission
A user without the rights 'Platform view' or 'Platform management' can access the platform list using a direct link.
The menu is not present on the desktop as expected but the platform view page is still accessible.
1- Create a user U.
2- Assign the user U in a role R without the rights 'Platform view' and 'Platform management'.
3- Connect with the user U.
4- Goto the URL http://<testlink_server>/lib/platforms/platformsView.php?tproject_id=<existing_project_id> [^]
tested on branch testlink_1_9_20_fixed
No tags attached.
Issue History
2020-05-19 17:29atisneNew Issue
2020-05-19 17:32atisneNote Added: 0029701
2020-05-19 19:33fmanNote Added: 0029706
2020-05-19 19:33fmanQA Team - Task Workflow Status => READY FOR TESTING
2020-05-19 19:33fmanStatusnew => resolved
2020-05-19 19:33fmanFixed in Version => 1.9.20_fixed
2020-05-19 19:33fmanResolutionopen => fixed
2020-05-19 19:33fmanAssigned To => fman

Notes
(0029701)
atisne   
2020-05-19 17:32   
Please consider https://github.com/TestLinkOpenSourceTRMS/testlink-code/pull/268 [^]
(0029706)
fman   
2020-05-19 19:33   
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/f775c26a7ab042a5a855d13a4e435cd892fe971a [^]