summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorwurblzap%gmail.com <>2007-10-05 23:50:12 +0200
committerwurblzap%gmail.com <>2007-10-05 23:50:12 +0200
commit27eb4b5c77ef844c49b14187871a000890c2b17e (patch)
treee5914a7821c7d359e323ab7b654c37e1d8dfaa18
parent34b3230eb1b4109204ae0c04dbb9000baac36d37 (diff)
downloadbugzilla-27eb4b5c77ef844c49b14187871a000890c2b17e.tar.gz
bugzilla-27eb4b5c77ef844c49b14187871a000890c2b17e.tar.xz
Bug 349567 – strict_isolation in post_bug should also check can_see_product.
Patch by Marc Schumann <wurblzap@gmail.com>; r=LpSolit; a=LpSolit
-rwxr-xr-xBugzilla/Bug.pm3
1 files changed, 2 insertions, 1 deletions
diff --git a/Bugzilla/Bug.pm b/Bugzilla/Bug.pm
index 067dc484e..1e1dee712 100755
--- a/Bugzilla/Bug.pm
+++ b/Bugzilla/Bug.pm
@@ -1175,7 +1175,8 @@ sub _check_strict_isolation {
my @blocked_users;
foreach my $pid (keys %unique_users) {
my $related_user = Bugzilla::User->new($pid);
- if (!$related_user->can_edit_product($product->id)) {
+ if (!$related_user->can_edit_product($product->id) ||
+ !$related_user->can_see_product($product->id)) {
push (@blocked_users, $related_user->login);
}
}