Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.
Hello,
Going deeper into the use of the Projeqtor API, we've hit an issue related to access rights.
Maybe related to this topic ? https://www.projeqtor.org/fr/forum-fr/2-submit-issues/12222-9-3-4-9-5-0-api-issue-on-planningelements-access-rights
With the following query :
{{baseURL}}/api/History/search/refType='Ticket'/refId={{ticketID}}/colName='idStatus'
- The solution works great for a user with administrative account
- When trying the same request with a Project Leader account, result is :
- empty result if the {{ticketID}} belongs to a project the user has access to
- valid result if the {{ticketID}} belongs to a project the user does not have access to
=> So in fact the PL can get data from tickets that he does not have access to.
Thanks for pointing out the issue.
Ticket #6142 recorded
Great, thanks 🙂
Extra info: if I'm not mistaken, the same issue applies to Notes as well.