Content
View differences
Updated by Robin Wagner about 9 years ago
**Preconditions**
- Work package module activated.
- User has permission to see work packages but is not allowed to create or edit them.
- User has no permissions in the “Timelines” section (especially not allowed to see or edit the timeline).
**Steps to reproduce**
1. Go to work package page.
2. Activate timeline by clicking on the timeline view button in the upper right corner. (Error -\> should not be possible based on permissions)
3. Move the start / end date of an existing work package or set the date of a work package without a date using the timeline. (Error -\> should not be possible based on permissions)
4. Display split screen and see that date is actually shown as changed (temporarily until reloaded).
**Actual behavior**
- Timeline permissions in administration are not applied to timeline in work package page.
- Through the connection between the timeline and the work package values, it is possible to temporarily edit work packages (at least in the frontend) without being allowed to edit work packages.
**Expected behavior**
- Timeline (and work package) permissions are applied.
**Screenshot**
**QA system**
- testenvironment.openproject-edge.com
- OpenProject 7.0.0
- Work package module activated.
- User has permission to see work packages but is not allowed to create or edit them.
- User has no permissions in the “Timelines” section (especially not allowed to see or edit the timeline).
**Steps to reproduce**
1. Go to work package page.
2. Activate timeline by clicking on the timeline view button in the upper right corner. (Error -\> should not be possible based on permissions)
3. Move the start / end date of an existing work package or set the date of a work package without a date using the timeline. (Error -\> should not be possible based on permissions)
4. Display split screen and see that date is actually shown as changed (temporarily until reloaded).
**Actual behavior**
- Timeline permissions in administration are not applied to timeline in work package page.
- Through the connection between the timeline and the work package values, it is possible to temporarily edit work packages (at least in the frontend) without being allowed to edit work packages.
**Expected behavior**
- Timeline (and work package) permissions are applied.
**Screenshot**
**QA system**
- testenvironment.openproject-edge.com
- OpenProject 7.0.0