DependencyTrack / DependencyTrack/frontend

Project details dropdowns looks ediable with VIEW_PORTFOLIO Permission

Open
#1,291 1 comment 0 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Vue
Stars
171
Forks
250
Avg merge
10h 56m
Merged PRs (30d)
84

Description

### Current Behavior

When logged in with a user with only the `VIEW_PORTFOLIO` permission, you can change the value of the dropdowns on Project details.
This includes the field of:
`Classifier`, `Project Collection Logic` and Parent`

(Good thing, the project doesn't update on the backend, only the visuals looks like its editable)

### Steps to Reproduce

1. Login with an user with only the VIEW_PORTFOLIO permission
2. Navigate to a random project
3. Click on View Details
4. Change the value of one of the dropdowns

### Expected Behavior

I would expect to see that those fields are disabled just like the fields: `Project Name`, `Version`, `Description` (The text input fields)
(extra this also counts for tags input field)

### Dependency-Track Frontend Version

4.13.2

### Browser

Mozilla Firefox

### Browser Version

139.0.4

### Operating System

Windows

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this defect was already reported

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the Project details page reached through View Details and reproduce the behavior with only the VIEW_PORTFOLIO permission. Compare the Classifier, Project Collection Logic, Parent, and tags controls with the already-disabled Project Name, Version, and Description fields. Done means those controls are visibly disabled and cannot be changed in that permission context.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
frontend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.