From b1e9eb6d4d2b68b5c015d08173dade32d7653aad Mon Sep 17 00:00:00 2001 From: Damien Regad Date: Tue, 30 Nov 2010 13:03:37 +0100 Subject: [PATCH] Fix #12568: Enforce bug monitoring visibility in history Only users with access level above show_monitor_list_threshold should be allowed to see monitoring-related events in the bug history. --- core/history_api.php | 7 +++++++ 1 files changed, 7 insertions(+), 0 deletions(-) diff --git a/core/history_api.php b/core/history_api.php index a591382..15c2efb 100644 --- a/core/history_api.php +++ b/core/history_api.php @@ -210,6 +210,13 @@ function history_get_raw_events_array( $p_bug_id, $p_user_id = null ) { } } + // monitoring + if( $v_type == BUG_MONITOR || $v_type == BUG_UNMONITOR ) { + if( !access_has_global_level( config_get( 'show_monitor_list_threshold' ) ) ) { + continue; + } + } + $raw_history[$j]['date'] = $v_date_modified; $raw_history[$j]['userid'] = $v_user_id; -- 1.7.1