Question

I have a need to detect the current user and project then:

• Only allow edits, but not replies/resolve for User A in Project B
• In Edits not allow anything but adding text and reassignment (no project changing etc) for the same user A in project B

Has anyone enforced this level of granularity in security? Any examples?

Answer 1

That's not really possible. We generally take the approach that if telling User A "Don't do that" doesn't work, your problems go a bit deeper. That said, one suggestion would be to write a plugin that monitors User A's bug commits, and logs whenever they do something inappropriate.

There's also some more info at this question: http://fogbugz.stackexchange.com/questions/2896/permissions-on-status-changes-allowed-per-role