summaryrefslogtreecommitdiffstats
path: root/extensions/BzAPI/template/en
diff options
context:
space:
mode:
authorDave Lawrence <dlawrence@mozilla.com>2012-11-14 17:07:55 +0100
committerDave Lawrence <dlawrence@mozilla.com>2012-11-14 17:07:55 +0100
commit38fa3fab5ae996c6116b55fe87e60ea6b53b2923 (patch)
tree7629193333039d451dc466bd1295fb3a37f8c71f /extensions/BzAPI/template/en
parent1af4436d340257353b1df90e7fb3e83aecba068a (diff)
downloadbugzilla-38fa3fab5ae996c6116b55fe87e60ea6b53b2923.tar.gz
bugzilla-38fa3fab5ae996c6116b55fe87e60ea6b53b2923.tar.xz
Bug 804978 - The BzAPI extension let everybody see all confidential product names when classifications are enabled
Diffstat (limited to 'extensions/BzAPI/template/en')
-rw-r--r--extensions/BzAPI/template/en/default/config.json.tmpl7
1 files changed, 3 insertions, 4 deletions
diff --git a/extensions/BzAPI/template/en/default/config.json.tmpl b/extensions/BzAPI/template/en/default/config.json.tmpl
index a3556ed3d..9c6852346 100644
--- a/extensions/BzAPI/template/en/default/config.json.tmpl
+++ b/extensions/BzAPI/template/en/default/config.json.tmpl
@@ -121,16 +121,15 @@ OLDATTACH2NEW = {
"max_attachment_size": [% (Param('maxattachmentsize') * 1000) FILTER json %],
[% IF Param('useclassification') %]
- [% classifications = user.get_selectable_classifications() %]
[% cl_name_for = {} %]
- "classification": {
- [% FOREACH cl IN classifications %]
+ "classification": {
+ [% FOREACH cl IN user.get_selectable_classifications() %]
[% cl_name_for.${cl.id} = cl.name %]
"[% cl.name FILTER json %]": {
"id": [% cl.id FILTER json %],
"description": "[% cl.description FILTER json %]",
"products": [
- [% FOREACH product IN cl.products %]
+ [% FOREACH product IN user.get_selectable_products(cl.id) %]
"[% product.name FILTER json %]"[% ',' UNLESS loop.last() %]
[% END %]
]