phproject
phproject copied to clipboard
logging in as guest user produces access denied error
BUG-MAJOR-RIGHTS
OBSERVED BEHAVIOR When a user who is registered as a guest tries to log in, the system replies with a blank page displaying following unformated text: "You do not have access to this page." Reloading the page, going back or trying to access the login page fails and produces the same result. It is only possible to go to the log in page after the browser cache for active sessions is cleared.
EXPECTED BEHAVIOR It seems that a guest is supposed to be able to log in and view and comment on everything by design. I'm not sure if this approach is a good solution though. IMO a guest should be able to log in and view only projects/issues he has been granted access to on an individual basis because guests usually are not part of the organisation/company. But this would require a fully fleshed out rights management.
The user ranks are not yet fully implemented, they're being worked on in the guest-access
branch. Some of the restrictions for higher-level users are already in place, but the lower level users like guests and clients are not complete yet.
Any news when this will be completed as it would be really useful for a current project.
This likely won't be implemented any time soon, I'm the only active contributor and I'm only really doing major bug fixes at this point as I am no longer actively using Phproject. If anyone else wants to contribute fixes or features thouch, I'm happy to accept pull requests!