vikunja icon indicating copy to clipboard operation
vikunja copied to clipboard

Read-only users can't comment

Open morrolinux opened this issue 11 months ago • 4 comments

Description

As of now, users belonging to a group that has "Read Only" permissions over a project can only view the project and its tasks as expected.

The problem lies in the comments section of a task: As a standard (RW) user, I can comment a task and tag a RO user, but he/she won't be able to reply to the comment, because the current policy is not to allow Read Only users to leave comments on tasks.

That, I think, would be a bit too restrictive for for any sorts of useful collaboration, as it makes no difference to the "sharing link" with read only setting.

Read only users should be able to at least comment on tasks, or maybe a more fine-grained permission system should be possible from the UI, since for the API keys it's already possible to have fine-grained permission control

Vikunja Version

5cea469

Browser and version

No response

Can you reproduce the bug on the Vikunja demo site?

Yes

Screenshots

No response

morrolinux avatar Feb 18 '25 11:02 morrolinux

I'm pretty sure we could integrate that. Logically, this kind of makes sense because adding a comment is a write operation - but I understand why it does not make sense from a workflow perspective.

I've seen your video, would you be open to submitting your changes as a PR? I've commented about the other things as well, but the comment seems to be stuck in some kind of spam-review queue.

kolaente avatar Mar 01 '25 18:03 kolaente

Hi @kolaente thanks for getting back to me!

Unfortunately I wasn't able to retrieve your comment even in my youtube spam section: it's just... gone! I'd love to know what your other comments were and possibly discuss them, just let me know if/where you'd be reachable :)

Now for the feature: I actually wanted to make a PR, but after creating an account on gitea I got an error:

Your account is prohibited from signing in, please contact your site administrator.

And I haven't received any confirmation email to click on or stuff like that. Maybe I've missed something?

Best, Moreno

morrolinux avatar Mar 01 '25 20:03 morrolinux

Hey Moreno!

Unfortunately I wasn't able to retrieve your comment even in my youtube spam section: it's just... gone!

Very interesting. I wasn't able to find it either.

From memory: I'm certain we could integrate the gantt changes, but we'd need to make a plan and look a little more into them. I think the easiest way going forward would be if you open issues here or threads in the forum to discuss these further. If it helped you more, we could also hop on a call to discuss this.

And I haven't received any confirmation email to click on or stuff like that. Maybe I've missed something?

I've just enabled your account - unfortunately, each account needs to be enabled manually to prevent spam.

kolaente avatar Mar 01 '25 20:03 kolaente

Hi,

Any update on this feature ?

I see it's in the backlog as API-903 but doesn't seem to be a priority i guess.

For what it's worth, I'd really enjoy this to become a feature!

p3x avatar Nov 15 '25 02:11 p3x