![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 6 days ago
Last modified 5 days ago
#8393 new defect (bug)
Review permissions for Milestone and Owner inputs
| Reported by: | joedolson | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Trac | Keywords: | |
| Cc: |
Description
There appear to have been a few cases recently where community members have been able to change ticket owners and milestones, where we expect that to only be available to committers and bug gardeners.
Example: https://core.trac.wordpress.org/ticket/65297
It's caused the occasional problem with bug scrubs where tickets have been added to the milestone unexpectedly, and should be checked.
Note:
See TracTickets
for help on using tickets.
Per https://make.wordpress.org/core/handbook/testing/bug-gardening/#4-triage-the-ticket, regular users shouldn't have access to change milestones, and confirmed with @jorbin that this user does not have enhanced permissions.
Seems like something has regressed somewhere.