Bug 312787 When strict_isolation is set, do not permit users to alter deps on bugs unless they can edit both bugs

Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko, a=justdave

1 files changed, 7 insertions, 0 deletions

diff --git a/process_bug.cgi b/process_bug.cgi
index adb6a3ded..dc119179c 100755
--- a/process_bug.cgi
+++ b/process_bug.cgi
@@ -165,6 +165,13 @@ foreach my $field ("dependson", "blocked") {
                 $vars->{'field'} = $field;
                 ThrowUserError("illegal_change", $vars);
             }
+            if (Param("strict_isolation")) {
+                my $deltabug = new Bugzilla::Bug($id, $user);
+                if (!$user->can_edit_product($deltabug->{'product_id'})) {
+                    $vars->{'field'} = $field;
+                    ThrowUserError("illegal_change_deps", $vars);
+                }
+            }
         }
     } else {
         # Bugzilla does not support mass-change of dependencies so they