# Bug OP-16167 - User without permission to "Save views" can save changes to work package views

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-16167

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module |  |
| Target versions | 15.1.0 |
| Observed in versions | 15.0.0 |
| Sprint | 15.1.0 |
| Backlog bucket |  |
| Bug found in version (deprecated) | 15.0.x |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

1.  Have a user U in project P with a role with the permission "Manage public views" but without the permission "Save views".

2.  As U, navigate to project P and open an existing work package view.

3.  Perform some changes and save.

### What is the buggy behavior?

  - User can save changes to work package view without having the permission "Save views".

### What is the expected behavior?

1.  Not possible to save changes to view without permission "Save views".

### Screenshots and other files

*<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/238273/content">*

*<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/238274/content">*

### Environment information

**OpenProject installation type**

  - Hosted cloud edition

**OpenProject version**

*If you're not running on the cloud edition, please specify the version of OpenProject you're running. Example: v12.1.5*

**Browser**

- [x] Chrome
- [x] Firefox
- [ ] Safari
- [ ] Mobile Safari
- [ ] Other (please specify)

**Operating System**

- [x] Windows
- [ ] Mac OS X
- [ ] Mobile iOS
- [ ] Mobile Android
- [ ] Linux (please specify distro)
- [ ] Chrome OS
- [ ] Other (please specify)