When User role can edit all tasks even when restricted to assigned Projects only

Hi Dylan,

When the User role is restricted to assigned Projects only, they can still see and edit all tasks.

To see this behaviour, first restrict User role to: View Tasks and View Assigned Projects. Now create two projects and in each project create a task. Assign a
User role account to one project only.

Login as that account and go to Tasks-> All Tasks

You should see both tasks from both projects even though you can only see the one project on the Project grid. You can view and edit all the details of the task in the project which you’re not assigned to.

Furthermore when you are editing a task you can see in the various pull down menus:
– All projects (even when you are restricted to only assigned projects)
– Only yourself (when the “Allow users to view other members on the site” is unchecked), this should be other project members.
– All teams (even if you’re not in a team), this should be only your assigned teams.

Looks like you’re going to have to run just about everything through ACL filters…

Regards,

Peter