From d0042bb7c9340ef4dd80b3abe3b2f45ed4bf862b Mon Sep 17 00:00:00 2001
From: "bugreport%peshkin.net" <>
Date: Sat, 22 Oct 2005 20:07:05 +0000
Subject: Bug 312787 When strict_isolation is set, do not permit users to alter
 deps on bugs unless they can edit both bugs Patch by Joel Peshkin
 <bugreport@peshkin.net> r=kiko, a=justdave

---
 process_bug.cgi | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'process_bug.cgi')

diff --git a/process_bug.cgi b/process_bug.cgi
index adb6a3ded..dc119179c 100755
--- a/process_bug.cgi
+++ b/process_bug.cgi
@@ -165,6 +165,13 @@ foreach my $field ("dependson", "blocked") {
                 $vars->{'field'} = $field;
                 ThrowUserError("illegal_change", $vars);
             }
+            if (Param("strict_isolation")) {
+                my $deltabug = new Bugzilla::Bug($id, $user);
+                if (!$user->can_edit_product($deltabug->{'product_id'})) {
+                    $vars->{'field'} = $field;
+                    ThrowUserError("illegal_change_deps", $vars);
+                }
+            }
         }
     } else {
         # Bugzilla does not support mass-change of dependencies so they
-- 
cgit v1.2.3-24-g4f1b