Problems with ACL

9 years 4 months ago #1 by budnikasr
Problems with ACL was created by budnikasr
Hello, I'm new here and although you have provided a great tool, I am having some issues with ACL and how they interact with the Issue Tracker and not sure if this is even possible.

So I have set up the issue tracker so that you can only access it if you are registered and logged in. Is there a way to limit editing of certain areas by certain users. For Example, John Doe / Lead is responsible can create and edit issues and he is the only one that can update progress over the entire project. But a member / contributor should only be able to edit additional details. They should not be able to edit the Summary, or add progress updates. This member /contributor can create issues and assign a lead to it, but once it is saved, only the lead can control progress. Is this possible?

Thanks,

Robert

Please Log in or Create an account to join the conversation.

9 years 4 months ago - 9 years 4 months ago #2 by chrisc
Replied by chrisc on topic Problems with ACL
A user (registered or guest) may create an issue providing the ACLs are configured correctly. They can also add additional information to an issue, providing they are marked as the individual who raised the issue. [This means that a guest user cannot add more information since they can not be uniquely identified as rasising an issue.] Data added by the issue raiser from the front end is added to the issue progress history as another record. They cannot change it, but can always add more information correcting (if necessary) any information they have previously recorded, which in turn creates another 'new' progress record for the issue.

Users who are indentified as being 'staff' or 'admin' in the Issue Tracker people table can be assigned to an issue to work it. [This is not an ACL but acts in a similar way. The ACL acts on the 'whole issue record' which includes all the issue fields, but we need to control individual parts of the issue record.] These users would see the progress data, resolution fields and modify/add to the fields. [Other users may 'view' the data in these fields if they are given visibility via the 'view' options from the menu or via the component options, but they cannot update/change these fields.]

Generally 'staff' will update only the issues to which they are 'assigned', since these are the only issues they will 'see'. See the 'list' option 'show assigned' which displays al teh issues to which the viewer can 'see'.

Issue admin are effectively 'gods' with the ability to edit/change any field, delete issues etc.

There is a table in the docs that provides a list of what each specific user may or may not do, which you may find useful.

Regards

If you are using our extensions please leave a review at the JED: IP Mapping | Issue Tracker | JAudit | Password Control

Please Log in or Create an account to join the conversation.

Time to create page: 0.154 seconds
Go To Top

Joomla! Debug Console

Session

Profile Information

Memory Usage

Database Queries