test task that only admins can see
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	a_smart_kitten__test
	Thu, Apr 2, 10:09 AM

Description

to see if a non-admin (who can’t view this task) can create a subtask of it using https://phabricator.wmcloud.org/maniphest/task/edit/form/3/?parent=276 (or using conduit maniphest.edit)

Details

Security: None
Risk Rating: N/A

Event Timeline

a_smart_kitten__test created this task.Thu, Apr 2, 10:09 AM

a_smart_kitten__test created this object with visibility "Administrators".

a_smart_kitten__test created this object with edit policy "Administrators".

a_smart_kitten__test updated the task description. (Show Details)

turns out that they apparently can’t:

Parent task identifier "276" does not identify a visible task.

a_smart_kitten__test closed this task as Declined.Thu, Apr 2, 10:12 AM

a_smart_kitten__test changed the visibility from "Administrators" to "Public (No Login Required)".

a_smart_kitten__test changed the edit policy from "Administrators" to "All Users".

wait what about conduit

[{"type":"parent","value":"PHID-TASK-rdnghrhopik2clze6aiv"},{"type":"title","value":"test subtask creation of a hidden task that i can't see but that i know the PHID of"}]

or something like that i guess

a_smart_kitten__test2 created subtask T277: IGNORE ME THIS TEST WAS NOT DONE PROPERLY.Thu, Apr 2, 10:27 AM

a_smart_kitten__test2 closed subtask T277: IGNORE ME THIS TEST WAS NOT DONE PROPERLY as Invalid.Thu, Apr 2, 10:28 AM

a_smart_kitten__test2 removed a subtask: T277: IGNORE ME THIS TEST WAS NOT DONE PROPERLY.

apparently not with conduit either, at least not with maniphest.edit:

[Access Denied: Restricted Task] (Can View) You do not have permission to view this object. // Administrators can take this action. The assignee of a task can always view and edit it.

a_smart_kitten__test closed this task as Declined.Thu, Apr 2, 10:35 AM