Commit 275a10ab authored by lpsolit%gmail.com's avatar lpsolit%gmail.com

Bug 370921: reporter_accessible and cclist_accessible checkboxes in show_bug.cgi…

Bug 370921: reporter_accessible and cclist_accessible checkboxes in show_bug.cgi appear editable by users with no privs - Patch by Fré©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
parent 9de3481e
...@@ -671,17 +671,17 @@ if (defined $cgi->param('id')) { ...@@ -671,17 +671,17 @@ if (defined $cgi->param('id')) {
q{SELECT group_id FROM bug_group_map WHERE bug_id = ?}, q{SELECT group_id FROM bug_group_map WHERE bug_id = ?},
undef, $cgi->param('id')); undef, $cgi->param('id'));
if ( $havegroup ) { if ( $havegroup ) {
foreach my $field ('reporter_accessible', 'cclist_accessible') {
if ($bug->check_can_change_field($field, 0, 1, \$PrivilegesRequired)) {
DoComma(); DoComma();
$cgi->param('reporter_accessible', $cgi->param($field, $cgi->param($field) ? '1' : '0');
$cgi->param('reporter_accessible') ? '1' : '0'); $::query .= " $field = ?";
$::query .= "reporter_accessible = ?"; push(@values, $cgi->param($field));
push(@values, $cgi->param('reporter_accessible')); }
else {
DoComma(); $cgi->delete($field);
$cgi->param('cclist_accessible', }
$cgi->param('cclist_accessible') ? '1' : '0'); }
$::query .= "cclist_accessible = ?";
push(@values, $cgi->param('cclist_accessible'));
} }
} }
......
...@@ -518,11 +518,13 @@ ...@@ -518,11 +518,13 @@
<p> <p>
<input type="checkbox" value="1" <input type="checkbox" value="1"
name="reporter_accessible" id="reporter_accessible" name="reporter_accessible" id="reporter_accessible"
[% " checked" IF bug.reporter_accessible %]> [% " checked" IF bug.reporter_accessible %]
[% " disabled=\"disabled\"" UNLESS bug.check_can_change_field("reporter_accessible", 0, 1) %]>
<label for="reporter_accessible">Reporter</label> <label for="reporter_accessible">Reporter</label>
<input type="checkbox" value="1" <input type="checkbox" value="1"
name="cclist_accessible" id="cclist_accessible" name="cclist_accessible" id="cclist_accessible"
[% " checked" IF bug.cclist_accessible %]> [% " checked" IF bug.cclist_accessible %]
[% " disabled=\"disabled\"" UNLESS bug.check_can_change_field("cclist_accessible", 0, 1) %]>
<label for="cclist_accessible">CC List</label> <label for="cclist_accessible">CC List</label>
</p> </p>
[% END %] [% END %]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment