Reproduction Steps
Note: This can be reproduced without having to change anything with Spaces, as long as the user isn't in the Default View Policy for Maniphest Tasks
- Make the Default Space visible to Employees
- Create a Space visible to project Contractors
- Create a Maniphest Task Form (/transactions/editengine/maniphest.task/) that is visible to Contractors, set as being Edit Form
- Create a User that is only a member of Contractors and which does not have access to the default space (not a member of Employees
- Change the Default View Policy for Maniphest Tasks to be Employees (this bug does not seem to be affected by Default Edit Policy)
- Log in as the new user and attempt to create a new task using that task form. You will be presented with the "Edit Locked Task" form.
Workaround
- In the cases I've seen where users are prompted with this, they have the option to "Override Task Lock". Clicking this will allow the user to create a task, even if they're not in Default View or Default Edit policies for Maniphest Tasks.
- Add the outcast groups to Default View Policy for Maniphest Tasks.
Environment
libphutil | 24ede7a5dbfd38079c87fc61de64012551965837 |
arcanist | 822bc53ca306e06314560d8a76f68771d732e8e0 |
phabricator | 56dd1b297c3e5cdbb477acc7435d6aa5749f33f2 |