If I add the user to the project he gets the mails. (role = viewer)

But unfortunatelly this user is not member of this project.

We should not allow that such users can be added to the list of monitoring users.
We might even think about removing users from existing lists, if users are no longer member of a project

As a result he does not receive any emails related to this bug!

IMO the right behavior that should not be changed.

I would have expected that he gets the mails but can´t enter the bug because of "access denied".

Users that are not allowed to view an issue should also not get mails that finally contain the same content that can be viewed on the issue page.

Hi Atrol,

[Quote]We should not allow that such users can be added to the list of monitoring users.
We might even think about removing users from existing lists, if users are no longer member of a project[/Quote]
I agree that would be fine for me. But now the Reporter and Developer relay on that the monitored users are informed about the issue!
They can´t figure out a missing project participation.
As long as the monitor box is a text field and not drop down (and there is no verification), Mantis should send mails to if 'monitor' => ON. The user is informed and realise that he has a missing permission.
Or send a mail "you should be informed about bug xxx but you have insufficent permission" in mail api instead of not inform the explicit entered monitors.

Greeetings,

zazzarim

We should not allow that such users can be added to the list of monitoring users.

Implemented in PR https://github.com/mantisbt/mantisbt/pull/1789

Hi Atrol,

thank you for the quick solution.
I´ve tested your implementation and it works.

zazza

mantis.jpg (80,211 bytes)   

mantis.jpg (80,211 bytes)   

Thanks @Zazzarim for the feedback.