wrong permissions for task while in kanab view and projects module

[MrJico]

Information about bug

Background

while the projects module and tasks does have some great functionality, it lacks, the necessary default permissions, and filtering for the users, so to get around this, we can add a custom permission to restrict for the department how ever this still doesn't filter the tasks that don't belong to the user or the projects department, so to fix that we can edit the permissions for the Task and enable only if creator it will filter the tasks that only belong or/and shared wit the user, how ever with this enabled the user can no longer, use the drag and drop functionality when using the kanban view, and gets a permission denied error.

Issues

• event when the projects are restricted and the task belongs to that project its still visible to every user, if they view through the tasks page.
• when only if creator is enabled for the tasks, the user cannot use the kanban view to edit the tasks.

Suggestions

• for the tasks, it makes more sense for the default to be only view there own tasks, or tasks assigned to them.
• for the projects the same as above, plus the department if they are a part of, or if the department is not specified in project, the project and all of its tasks should be visible to the user and but not editable.

Steps to reproduce

1. edit the permission for any rule, that has access to tasks, and enable the only if creator for the Task Table.
2. create any tasks and/or assign to the user that has the role.
3. go to tasks and view in kanban, try to drag and drop or edit the task, you get permission error.

Module

projects, other

Version

ERPNext: v15.31.5 (version-15)
Frappe Framework: v15.37.0 (version-15)

Installation method

manual install

Relevant log output / Stack trace / Full Error Message.

No response

[MrJico]

any updates ?