# Bug OP-7418 - Users without permissions can see budgets in work package dropdown / internal error

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-7418

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | High |
| Module |  |
| Target versions | 11.0.0 |
| Observed in versions | 10.6.0 |
| Sprint | 11.0.0 |
| Backlog bucket |  |
| Bug found in version (deprecated) | 10.6.x |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### **Environment**:

OpenProject 10.6.5

OpenProject 11.0 (edge)

### **Steps to reproduce:**

1.  User without permission to view budgets but with permission to edit work packages navigates to project where budgets are activated.
2.  Open work package in split view and click to edit "Budget" attribute. -> Error: User can see list of budgets in dropdown - even though user does not have permissions.
3.  When selecting a budget value an internal error is displayed.

### **Actual Behavior**

Budget values are shown in dropdown - even though user does not have permission to see budgets.

Internal error when selecting a budget.

![](/api/v3/attachments/18642/content)

### **Expected Behavior**

Attribute "Budget" is not shown if user does not have the permission to view budgets.