diff options
| author | Dave Lawrence <dlawrence@mozilla.com> | 2012-11-14 17:07:55 +0100 |
|---|---|---|
| committer | Dave Lawrence <dlawrence@mozilla.com> | 2012-11-14 17:07:55 +0100 |
| commit | 38fa3fab5ae996c6116b55fe87e60ea6b53b2923 (patch) | |
| tree | 7629193333039d451dc466bd1295fb3a37f8c71f /extensions | |
| parent | 1af4436d340257353b1df90e7fb3e83aecba068a (diff) | |
| download | bugzilla-38fa3fab5ae996c6116b55fe87e60ea6b53b2923.tar.gz bugzilla-38fa3fab5ae996c6116b55fe87e60ea6b53b2923.tar.xz | |
Bug 804978 - The BzAPI extension let everybody see all confidential product names when classifications are enabled
Diffstat (limited to 'extensions')
| -rw-r--r-- | extensions/BzAPI/template/en/default/config.json.tmpl | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/extensions/BzAPI/template/en/default/config.json.tmpl b/extensions/BzAPI/template/en/default/config.json.tmpl index a3556ed3d..9c6852346 100644 --- a/extensions/BzAPI/template/en/default/config.json.tmpl +++ b/extensions/BzAPI/template/en/default/config.json.tmpl @@ -121,16 +121,15 @@ OLDATTACH2NEW = { "max_attachment_size": [% (Param('maxattachmentsize') * 1000) FILTER json %], [% IF Param('useclassification') %] - [% classifications = user.get_selectable_classifications() %] [% cl_name_for = {} %] - "classification": { - [% FOREACH cl IN classifications %] + "classification": { + [% FOREACH cl IN user.get_selectable_classifications() %] [% cl_name_for.${cl.id} = cl.name %] "[% cl.name FILTER json %]": { "id": [% cl.id FILTER json %], "description": "[% cl.description FILTER json %]", "products": [ - [% FOREACH product IN cl.products %] + [% FOREACH product IN user.get_selectable_products(cl.id) %] "[% product.name FILTER json %]"[% ',' UNLESS loop.last() %] [% END %] ] |