# Bug OP-19935 - Sprint names and assignments leaking through activity without view_sprints permission

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-19935

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module |  |
| Target versions | 17.8.0 |
| Observed in versions |  |
| Sprint |  |
| Backlog bucket |  |
| Bug found in version (deprecated) |  |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers | OP Dev Polaris Team |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

_Please write down the steps to reproduce. Try to write down all necessary preconditions (what permissions do you have, are other users involved?). Example:_

**HEADS UP: this was just observed more or less on accident on your installation with my session login**

1.  Login as user without view\_sprints permission (I imagine I don't have that permission, because I don't see the module, or the filter, or the wp-column)
    
2.  Check a work-package activity or the activity module with work-packages being assigned to sprints
    

### What is the buggy behavior?

_Please describe the bug in as much detail as possible. Example:_

*   The sprint name (and by reverse engineering the assignments) is leaked to me
    

### What is the expected behavior?

_Describe how the application should behave like. Example:_

1.  Since I'm lacking the permission, I should not be able to identify which work packages are assigned to what sprint or how a specific sprint is named, correct?
    

### Screenshots and other files

_If you have screenshots of the application's bug behavior or other relevant files, please drag them into this place or attach them using the "Files" section._

<br>

<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/923702/content">

### Environment information

**Browser**

*   [ ] Chrome
*   [ ] Firefox
*   [x] Safari
*   [ ] Mobile Safari
*   [ ] Other (please specify)

**Operating System**

*   [ ] Windows
*   [x] Mac OS X
*   [ ] Mobile iOS
*   [ ] Mobile Android
*   [ ] Linux (please specify distro)
*   [ ] Chrome OS
*   [ ] Other (please specify)

**Language**

English