ChiliProject is not maintained anymore. Please be advised that there will be no more updates.
We do not recommend that you setup new ChiliProject instances and we urge all existing users to migrate their data to a maintained system, e.g. Redmine. We will provide a migration script later. In the meantime, you can use the instructions by Christian Daehn.
Cannot edit note (Bug #888)
I'm trying to edit a note I left on an issue by clicking on the little pencil (link is https://www.chiliproject.org/journals/edit/14451) but it returns me a 403 like I don't have the permission to do so (which is possible).
If I'm not allowed to edit the note, I shouldn't see the pencil icon to the right of the note.
|related to Bug #966: "edit own notes" fails since 3.1.0||Closed||2012-04-05|
Everyone should be able to edit his own notes, so you shouldn't be getting a 403. Can you confirm this is still an issue and if so point me to the issue the journal is part of (the link you posted seems to be ajax only) and maybe note the time when you tried to call the link so I can see if the logs have a say in this? Thanks!
I've done the request a couple of times at 21:17.
Still no success (not working on any comments I've left on other issues as well).
Heh, I hadn't thought about timezones and searched at the wrong place for a few seconds _
Anyway, I found the place your requests came in, there's nothing of interest in the logs other than that you hit 403s though. I could open the edit pane there OK though, so it's note an issue with the functionality but the authorization taking place before it.
OK, the crux of the issue is the call to
editable_by? user on the journal in the permission check in
JournalsController#edit source:/app/controllers/journals_controller.rb#L67, because it's not aware of the
:edit_own_issue_note permission, which is the only one applicable to you here.