Bug 151695 - assignee/qa contact can't access secure bugs

r=myk x2
parent 599e1db4
...@@ -800,8 +800,12 @@ sub SelectVisible { ...@@ -800,8 +800,12 @@ sub SelectVisible {
# cause all rows to be returned! We work arround this by adding an not isnull # cause all rows to be returned! We work arround this by adding an not isnull
# test to the JOINed cc table. See http://lists.mysql.com/cgi-ez/ezmlm-cgi?9:mss:11417 # test to the JOINed cc table. See http://lists.mysql.com/cgi-ez/ezmlm-cgi?9:mss:11417
# Its needed, even though it shouldn't be # Its needed, even though it shouldn't be
$replace .= "OR (bugs.reporter_accessible = 1 AND bugs.reporter = $userid) $replace .= "OR (bugs.reporter_accessible = 1 AND bugs.reporter = $userid)" .
OR (bugs.cclist_accessible = 1 AND selectVisible_cc.who = $userid AND not isnull(selectVisible_cc.who))"; " OR (bugs.cclist_accessible = 1 AND selectVisible_cc.who = $userid AND not isnull(selectVisible_cc.who))" .
" OR (bugs.assigned_to = $userid)";
if (Param("useqacontact")) {
$replace .= " OR (bugs.qa_contact = $userid)";
}
} }
$replace .= ") AND "; $replace .= ") AND ";
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment