Commit 275a10ab authored by lpsolit%gmail.com's avatar lpsolit%gmail.com

Bug 370921: reporter_accessible and cclist_accessible checkboxes in show_bug.cgi…

Bug 370921: reporter_accessible and cclist_accessible checkboxes in show_bug.cgi appear editable by users with no privs - Patch by Fré©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
parent 9de3481e
......@@ -671,17 +671,17 @@ if (defined $cgi->param('id')) {
q{SELECT group_id FROM bug_group_map WHERE bug_id = ?},
undef, $cgi->param('id'));
if ( $havegroup ) {
foreach my $field ('reporter_accessible', 'cclist_accessible') {
if ($bug->check_can_change_field($field, 0, 1, \$PrivilegesRequired)) {
DoComma();
$cgi->param('reporter_accessible',
$cgi->param('reporter_accessible') ? '1' : '0');
$::query .= "reporter_accessible = ?";
push(@values, $cgi->param('reporter_accessible'));
DoComma();
$cgi->param('cclist_accessible',
$cgi->param('cclist_accessible') ? '1' : '0');
$::query .= "cclist_accessible = ?";
push(@values, $cgi->param('cclist_accessible'));
$cgi->param($field, $cgi->param($field) ? '1' : '0');
$::query .= " $field = ?";
push(@values, $cgi->param($field));
}
else {
$cgi->delete($field);
}
}
}
}
......
......@@ -518,11 +518,13 @@
<p>
<input type="checkbox" value="1"
name="reporter_accessible" id="reporter_accessible"
[% " checked" IF bug.reporter_accessible %]>
[% " checked" IF bug.reporter_accessible %]
[% " disabled=\"disabled\"" UNLESS bug.check_can_change_field("reporter_accessible", 0, 1) %]>
<label for="reporter_accessible">Reporter</label>
<input type="checkbox" value="1"
name="cclist_accessible" id="cclist_accessible"
[% " checked" IF bug.cclist_accessible %]>
[% " checked" IF bug.cclist_accessible %]
[% " disabled=\"disabled\"" UNLESS bug.check_can_change_field("cclist_accessible", 0, 1) %]>
<label for="cclist_accessible">CC List</label>
</p>
[% END %]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment