This is part of story #19275 restrict who can see comments The goal of this patch is to be compliant with artifact view. All changesets that you can see in API Rest, should be the same in artifact view. Of course, there is one more changeset with API Rest, because this is the initial changeset. How to test: - Have 2 users: "Alice" and "Bob" - Alice is in a ugroup "ugroup_alice" - Have a field that only Alice can see - Have some changesets in an artifact: - With comment and field that Bob can see - With comment and field that Bot CAN NOT see - With private comment and field that Bob can see - With private comment and field that Bob CAN NOT see - With comment only - With change on field that Bob can see only => Use REST route artifacts/$id/changeset Expected results: - With field mode 'all': |- With Alice: => She can see all changesets |- With Bob: => He can see only changeset with comment or changes. There are no changesets with no changes. - With field mode 'comment': |- With Alice: => She can see all comments, private and public |- With Bob: => There are no empty comments Change-Id: I7d3d122a9088bada5ed94807c640e0836a32c9d5

+432 −32

Author

Benjamin Bouillot (ben.bouillot) 2021-03-02 15:45

Committer

Benjamin Bouillot (ben.bouillot) 2021-03-08 13:48

Hash 824b8c6f947a64094e382d9f2c98059fe62a09f5

Parent e41fd5bed3b0396aced33230aae80fa8d1f67a0a

Reference git #tuleap/stable/824b8c6f947a64094e382d9f2c98059fe62a09f5