diff options
| author | bugreport%peshkin.net <> | 2002-11-12 10:58:02 +0100 |
|---|---|---|
| committer | bugreport%peshkin.net <> | 2002-11-12 10:58:02 +0100 |
| commit | e07c48f02f6d36bd6b9c5d8764ee88173f4e29d4 (patch) | |
| tree | 74dc80b33131995cfeaefb691d05dbd67097d509 /Bugzilla | |
| parent | bd5461abd0f434a0f7dfe6e6db49be0c28cea33d (diff) | |
| download | bugzilla-e07c48f02f6d36bd6b9c5d8764ee88173f4e29d4.tar.gz bugzilla-e07c48f02f6d36bd6b9c5d8764ee88173f4e29d4.tar.xz | |
Bug 179491 Searchs of attachments containing a string do not enforce attchment privacy
r=bbaetz
a=justdave
Diffstat (limited to 'Bugzilla')
| -rw-r--r-- | Bugzilla/Search.pm | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Bugzilla/Search.pm b/Bugzilla/Search.pm index d7e3818d0..11dbb57da 100644 --- a/Bugzilla/Search.pm +++ b/Bugzilla/Search.pm @@ -424,6 +424,9 @@ sub init { "^attachments\..*," => sub { my $table = "attachments_$chartid"; push(@supptables, "attachments $table"); + if (Param("insidergroup") && !&::UserInGroup(Param("insidergroup"))) { + push(@wherepart, "$table.isprivate = 0") ; + } push(@wherepart, "bugs.bug_id = $table.bug_id"); $f =~ m/^attachments\.(.*)$/; my $field = $1; |