0003390: Private bugs are visible on print_all_bug_page.php

ID	Project	Category	View Status	Date Submitted	Last Update
0003390	mantisbt	security	public	2003-10-27 17:34	2004-02-06 16:15

Reporter	Luebbe	Assigned To	vboctor
Priority	normal	Severity	major	Reproducibility	always
Status	closed	Resolution	duplicate
Platform	IE 6 / W2K	OS	Suse Linux	OS Version	Apache

Summary	0003390: Private bugs are visible on print_all_bug_page.php
Description	Even if the user has only reporter access level or lower
Steps To Reproduce	Enter a private bug, login as reporter, click on print bugs voilà
Tags	No tags attached.

vboctor 2003-10-27 23:16 manager ~0004684	Which Mantis version are you using?

Luebbe 2003-10-28 08:40 reporter ~0004687	Sorry, I didn't use the advanced report page to report this bug... I'm running 0.18rc1 on a Suse Linux 8.2, with Apache 2.0.47, PHP 4.3.3 and MySQL 3.23.49 compiled from scratch.

Luebbe 2003-11-18 17:00 reporter ~0004746	If you need a URL to reproduce the issue https://support.rac.de:4433/bugtracker should do the trick. Login as reporter/reporter and select project 'Spielwiese' uncheck all filters and you should be able to see (currently) five entries. Click on 'print bugs' and you will see a private bug (#155) You can't jump to this bug directly, but you can see print and export it.

evelk 2003-12-16 09:32 reporter ~0004812	in print_all_bug_page.php: what does the WHERE 1=1 do? It shows you ALL bugs, when you are NOT linked to any projects... if ( 0 == $project_count ) { $t_where_clause = ' WHERE 1=1'; } else { Shouldn't this be WHERE 0=1 ??

vboctor 2004-02-05 18:59 manager ~0004962	This is a duplicate for 0003445. See the other bug for the fix.