# Bug OP-18199 - Shared WP inaccessible to non-project members (Error 404) #68852

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-18199

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module | Modules and project features / Work packages, Administration / Roles and permissions |
| Target versions | 16.6.3 |
| Observed in versions |  |
| Sprint | 16.6.3 |
| Backlog bucket |  |
| Bug found in version (deprecated) |  |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

Happened with ticket: <mention class="mention" data-id="68852" data-type="work_package" data-text="#68852">\#68852</mention> 

1.  Log in as a user with permissions to create and share work packages in a project.

2.  Create two work packages in this project.

3.  Share **both** work packages with a user who **is not part of the overall project** and grant edit permissions (the type of permission does not really matter).

4.  Log in as this user and try accessing the shared work packages.

### What is the buggy behavior?

  - User who is not project member receives a 404 error when trying to open the shared WP.
    
      - In the sharing settings, the WP still appears as shared with this user and shows they have edit permissions.

  - Re-sharing the WP with the same user does not resolve the issue but they continue to see a 404 error.

<br>

  - This was working correctly in 16.5: no changes were made to the WP’s configuration or permissions by the owner.

  - If sharing only one work package from the project, sharing works

### What is the expected behavior?

1.  Users who have been granted access to the WP (even if they are not project members) should be able to open and edit it as before.

2.  If something has changed in how sharing works, the UI or documentation should reflect that (e.g., an error or warning indicating the users no longer have access).

### Environment information

*community,* [*358689050ea5ccd81f72fb3d6b324f8c6457f6ad*](https://github.com/opf/openproject/commits/358689050ea5ccd81f72fb3d6b324f8c6457f6ad)

OpenProject version 16.6.1

<br>