From c5b83b8709918dc7c0800d1cf8c309c9f94390b9 Mon Sep 17 00:00:00 2001 From: Holger Just Date: Mon, 28 Nov 2011 20:40:08 +0100 Subject: [PATCH] [#735] Don't allow time entry edits with only log_time permission Based on a patch by Jean-Philippe Lang. --- lib/redmine.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/redmine.rb b/lib/redmine.rb index 16f59228..bd5ad700 100644 --- a/lib/redmine.rb +++ b/lib/redmine.rb @@ -100,7 +100,7 @@ Redmine::AccessControl.map do |map| end map.project_module :time_tracking do |map| - map.permission :log_time, {:timelog => [:new, :create, :edit, :update]}, :require => :loggedin + map.permission :log_time, {:timelog => [:new, :create]}, :require => :loggedin map.permission :view_time_entries, :timelog => [:index, :show], :time_entry_reports => [:report] map.permission :edit_time_entries, {:timelog => [:new, :create, :edit, :update, :destroy]}, :require => :member map.permission :edit_own_time_entries, {:timelog => [:new, :create, :edit, :update, :destroy]}, :require => :loggedin