From f10990783862250ca80e96ac5e8a500bed0ee636 Mon Sep 17 00:00:00 2001 From: Byron Jones Date: Mon, 22 Jul 2013 13:19:19 +0800 Subject: Bug 850986: don't allow setting a flag's requestee to a disabled account r=dkl, a=justdave --- Bugzilla/Flag.pm | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'Bugzilla/Flag.pm') diff --git a/Bugzilla/Flag.pm b/Bugzilla/Flag.pm index 98029a1b1..e1e75f832 100644 --- a/Bugzilla/Flag.pm +++ b/Bugzilla/Flag.pm @@ -668,9 +668,14 @@ sub _check_requestee { # is specifically requestable. For existing flags, if the requestee # was set before the flag became specifically unrequestable, the # user can either remove him or leave him alone. - ThrowUserError('flag_requestee_disabled', { type => $self->type }) + ThrowUserError('flag_type_requestee_disabled', { type => $self->type }) if !$self->type->is_requesteeble; + # You can't ask a disabled account, as they don't have the ability to + # set the flag. + ThrowUserError('flag_requestee_disabled', { requestee => $requestee }) + if !$requestee->is_enabled; + # Make sure the requestee can see the bug. # Note that can_see_bug() will query the DB, so if the bug # is being added/removed from some groups and these changes -- cgit v1.2.3-24-g4f1b