From 4f4c25bb8d7bacecad8f69363d96483ea92ffc32 Mon Sep 17 00:00:00 2001 From: "travis%sedsystems.ca" <> Date: Fri, 21 Jan 2005 07:22:07 +0000 Subject: Bug 266579 : Users without privs can confirm bugs by assigning to themselves first, without having canconfirm privs Patch by LpSolit@gmail.com r=myk a=justdave --- post_bug.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'post_bug.cgi') diff --git a/post_bug.cgi b/post_bug.cgi index 3f2d32062..40111ff77 100755 --- a/post_bug.cgi +++ b/post_bug.cgi @@ -130,7 +130,7 @@ my $sql_product = SqlQuote($::FORM{'product'}); my $sql_component = SqlQuote($::FORM{'component'}); # Default assignee is the component owner. -if ($::FORM{'assigned_to'} eq "") { +if (!UserInGroup("editbugs") || $::FORM{'assigned_to'} eq "") { SendSQL("SELECT initialowner FROM components " . "WHERE id = $component_id"); $::FORM{'assigned_to'} = FetchOneColumn(); -- cgit v1.2.3-24-g4f1b