•  
      request #8219 Field with no permission should not be visible in tracker structure
    Infos
    #8219
    Joris MASSON (jmasson)
    2015-10-09 17:11
    2015-07-09 12:30
    8241
    Details
    Field with no permission should not be visible in tracker structure
    • Given a tracker with a field that nobody has permission to read
    • When I GET /v1/trackers/{id}
    • Then the "structure" object should not contain fields I don't have permission to read.

     

    In the attached json file, you'll see an example of the result of a GET /v1/trackers/{id} where the problem is visible. The user I used to make the request does not have permission to read the field with id 1385. It is  not present in the "values" array, as expected but it is present in the "structure" object when it should not.

    API
    development
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Under review
    Empty
    Attachments
    Example tracker structure.
    References
    Referenced by request #8219

    Follow-ups

    User avatar
    Joris MASSON (jmasson)2015-07-17 17:22
    • Summary
      -Field with no permission should not be visible in tracker strcture 
      +Field with no permission should not be visible in tracker structure