From ae708fdf327467851f95a2a4b6e81cf352d318f9 Mon Sep 17 00:00:00 2001
From: Dave Lawrence <dlawrence@mozilla.com>
Date: Tue, 7 Jan 2014 00:02:49 -0500
Subject: Bug 956135 - backport upstream bug 952284 to bmo/4.2 to hide tags set
 to private comments in the bug activity table

---
 Bugzilla/Bug.pm | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/Bugzilla/Bug.pm b/Bugzilla/Bug.pm
index 51035ce5a..272526f12 100644
--- a/Bugzilla/Bug.pm
+++ b/Bugzilla/Bug.pm
@@ -3929,6 +3929,15 @@ sub GetBugActivity {
         && $include_comment_tags
         && !$attach_id)
     {
+        # Only includes comment tag activity for comments the user is allowed to see.
+        $suppjoins = "";
+        $suppwhere = "";
+        if (!Bugzilla->user->is_insider) {
+            $suppjoins = "INNER JOIN longdescs
+                          ON longdescs.comment_id = longdescs_tags_activity.comment_id";
+            $suppwhere = "AND longdescs.isprivate = 0";
+        }
+
         $query .= "
             UNION ALL
             SELECT 'comment_tag' AS name,
@@ -3940,8 +3949,10 @@ sub GetBugActivity {
                    longdescs_tags_activity.comment_id as comment_id
               FROM longdescs_tags_activity
                    INNER JOIN profiles ON profiles.userid = longdescs_tags_activity.who
+                   $suppjoins
              WHERE longdescs_tags_activity.bug_id = ?
                    $datepart
+                   $suppwhere
         ";
         push @args, $bug_id;
         push @args, $starttime if defined $starttime;
-- 
cgit v1.2.3-24-g4f1b