diff options
| author | wurblzap%gmail.com <> | 2007-10-05 23:50:12 +0200 |
|---|---|---|
| committer | wurblzap%gmail.com <> | 2007-10-05 23:50:12 +0200 |
| commit | 27eb4b5c77ef844c49b14187871a000890c2b17e (patch) | |
| tree | e5914a7821c7d359e323ab7b654c37e1d8dfaa18 /Bugzilla | |
| parent | 34b3230eb1b4109204ae0c04dbb9000baac36d37 (diff) | |
| download | bugzilla-27eb4b5c77ef844c49b14187871a000890c2b17e.tar.gz bugzilla-27eb4b5c77ef844c49b14187871a000890c2b17e.tar.xz | |
Bug 349567 â strict_isolation in post_bug should also check can_see_product.
Patch by Marc Schumann <wurblzap@gmail.com>;
r=LpSolit; a=LpSolit
Diffstat (limited to 'Bugzilla')
| -rwxr-xr-x | Bugzilla/Bug.pm | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/Bugzilla/Bug.pm b/Bugzilla/Bug.pm index 067dc484e..1e1dee712 100755 --- a/Bugzilla/Bug.pm +++ b/Bugzilla/Bug.pm @@ -1175,7 +1175,8 @@ sub _check_strict_isolation { my @blocked_users; foreach my $pid (keys %unique_users) { my $related_user = Bugzilla::User->new($pid); - if (!$related_user->can_edit_product($product->id)) { + if (!$related_user->can_edit_product($product->id) || + !$related_user->can_see_product($product->id)) { push (@blocked_users, $related_user->login); } } |