MantisBT: master-1.2.x 86fc322d

Author Committer Branch Timestamp Parent
dhx dhx master-1.2.x 2010-03-31 23:16 master-1.2.x 886dccd9
Affected Issues  0011530: Support multiple access levels above manage_user_threshold
Changeset

Fix 0011530: Don't expose real name and email of higher users

manage_user_threshold grants permission to users so that they can modify
user accounts which have an equal or lower access level.

Therefore we shouldn't be exposing the real name and email of users on
view_user_page.php if the target user has a higher access level. The
manage user link should also not appear when the target user has a
higher access level.

mod - view_user_page.php Diff File