Customer cannot create timelines and milestones

[maxceem]

Customers can create new projects in connect-app. During the creation of a new project connect-app also creates a new timeline and milestones. But customer user pshah_customer cannot create timelines and milestones

Server returns error 403:

You do not have permissions to perform this action

Timelines:

Milestones:

[vikasrohit]

@maxceem I think it would allow customer to create timeline, provided that the customer is the part of the team of the project. Please try creating a project using pshah_customer and then try to add timeline using the same user. It should work theoretically, if not it must be a bug.

[maxceem]

@vikasrohit yeah, it doesn't work for the projects, created by the `pshah_customer.

For example project http://local.topcoder-dev.com:3000/projects/6668

Product 666 belong to the project 6668:

I try to make POST https://api.topcoder-dev.com/v4/timelines with the next data:

{
  "param": {
    "name": "Welcome to the Visual Design phase",
    "description": "This is the first stage in our project. We’re going to show you the detailed plan in your timeline, with all the milestones.",
    "startDate": "2018-07-22T14:32:58+00:00",
    "endDate": "2018-08-15T14:32:58+00:00",
    "reference": "product",
    "referenceId": 666
  }
}

Server return error 403: You do not have permissions to perform this action.

[vikasrohit]

Fixed. It should be working now, hopefully. :)

[maxceem]

@vikasrohit It works for timelines now. But still doesn't accept milestones.

I've created a project by the customer: http://local.topcoder-dev.com:3000/projects/6681

The project has product 693

For the product, customer managed to create a timeline 37

Though when customer tries to POST https://api.topcoder-dev.com/v4/timelines/37/milestones

With the next data:

{
  "param": {
    "name": "Phase Specification",
    "description": "dummy description",
    "duration": 5,
    "type": "phase-specification",
    "order": 1,
    "plannedText": "Before we can begin, we have to fill in the technical details. Your copilot will reach out shortly to discuss the specifications with you. Please monitor your communication thread for updates.",
    "activeText": "dummy activeText",
    "completedText": "Great job! We're ready to roll. Work on this project phase will begin shortly.",
    "blockedText": "dummy blockedText",
    "hidden": false,
    "startDate": "2018-07-23T13:18:50+00:00",
    "endDate": "2018-08-16T13:18:50+00:00",
    "status": "active"
  }
}

Server still returns ERROR 403: You do not have permissions to perform this action

[vikasrohit]

Although, we might not need to create individual milestones now, fixed the issue with permission check.