Restrict permissions on Milestones #3894

Open
opened 2025-11-02 05:29:49 -06:00 by GiteaMirror · 2 comments
Owner

Originally created by @mbarinc on GitHub (Sep 4, 2019).

  • Gitea version (or commit ref): 1.10.0+dev-145
  • Git version: 2.20
  • Operating system: RedHat 7.3
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

Now, every users can create / modify / delete milestones.
It's possible to block these actions on specific team?

It would be useful if only teams with a specific flag can be able to manage the milestones (for example under the Issue section in the edit team page, like the screenshot below)

Screenshots

image

Originally created by @mbarinc on GitHub (Sep 4, 2019). <!-- NOTE: If your issue is a security concern, please send an email to security@gitea.io instead of opening a public issue --> <!-- 1. Please speak English, this is the language all maintainers can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/gitea) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): 1.10.0+dev-145 - Git version: 2.20 - Operating system: RedHat 7.3 - Database (use `[x]`): - [ ] PostgreSQL - [ ] MySQL - [ ] MSSQL - [x] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [x] Not relevant - Log gist: ## Description Now, every users can create / modify / delete milestones. It's possible to block these actions on specific team? It would be useful if only teams with a specific flag can be able to manage the milestones (for example under the Issue section in the edit team page, like the screenshot below) ## Screenshots <!-- **If this issue involves the Web Interface, please include a screenshot** --> ![image](https://user-images.githubusercontent.com/3716953/64260456-2f8fb000-cf2b-11e9-88b5-ad3835688da4.png)
GiteaMirror added the type/proposal label 2025-11-02 05:29:49 -06:00
Author
Owner

@mbarinc commented on GitHub (Sep 5, 2019):

For my purpouse, I have modified the following lines in milestone.tmpl, removing CanWriteIssues and CanWritePulls with IsRepositoryOwner.
In this way only people joined in owner group can modify / delete the milestones:

85f56546c4/templates/repo/issue/milestones.tmpl (L70)

85f56546c4/templates/repo/issue/milestones.tmpl (L94)

I think that is correct that only some users can manage the milestones.

@mbarinc commented on GitHub (Sep 5, 2019): For my purpouse, I have modified the following lines in milestone.tmpl, removing CanWriteIssues and CanWritePulls with IsRepositoryOwner. In this way only people joined in owner group can modify / delete the milestones: https://github.com/go-gitea/gitea/blob/85f56546c4259ed9c11d31973344228ad667084e/templates/repo/issue/milestones.tmpl#L70 https://github.com/go-gitea/gitea/blob/85f56546c4259ed9c11d31973344228ad667084e/templates/repo/issue/milestones.tmpl#L94 I think that is correct that only some users can manage the milestones.
Author
Owner

@lunny commented on GitHub (Dec 23, 2019):

We need a new unit named milestone to do that.

@lunny commented on GitHub (Dec 23, 2019): We need a new unit named `milestone` to do that.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#3894