Uploaded image for project: 'SonarQube'
  1. SonarQube
  2. SONAR-7274

Projects listed in the "Quality Gates" space should be filtered based on permissions

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 5.6
    • Component/s: Quality Gate
    • Labels:

      Description

      When a user does not have the "Browse" permission on a project, he won't be able to see this project listed somewhere in the "Quality Profiles" space. To be consistent, the behaviour should be the same on the "Quality Gates" space.

      To reproduce:

      • As an admin:
        • analyse project A
        • on the project permissions for that project, grant the "Browse" permission to the "sonar-users" group only (=> remove "Anyone")
        • create a "Foo" QP and associate this profile to project A
        • create a "Bar" QG and associate this quality gate to project A
      • As an anonymous user:
        • Go on "Quality Profiles > Foo": you should not see the project listed in the "Projects" area
        • Go on "Quality Gates > Bar": you will see the project listed in the "Projects" area
          • => it should not be visible here

        Attachments

          Activity

            People

            Assignee:
            julien.lancelot Julien Lancelot
            Reporter:
            fabrice.bellingard Fabrice Bellingard
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Due:
              Created:
              Updated:
              Resolved: