MantisBT: master-1.2.x 385e0c90

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master-1.2.x 2012-01-01 11:14 master-1.2.x 864b6281
Affected Issues  0013561: Any manager can delete global categories
Changeset

User must have global access to update global categories

The user's global access level must be >= $g_manage_site_threshold to
be allowed to add, edit or delete global categories.

Prior to this, once a user had been defined as Manager on at least one
project, they could freely update global categories.

Also prevents such updates through URL manipulation.

Fixes 0013561
mod - manage_proj_cat_delete.php Diff File
mod - manage_proj_cat_edit_page.php Diff File
mod - manage_proj_page.php Diff File