Changesets: MantisBT

master-2.0.x a272e957

2012-06-04 11:21

Paul Richards


Details Diff
PHPDoc Fixes for mantis2.0
mod - account_delete.php Diff File
mod - account_manage_columns_page.php Diff File
mod - account_page.php Diff File
mod - account_prefs_inc.php Diff File
mod - account_prefs_page.php Diff File
mod - account_prefs_reset.php Diff File
mod - account_prefs_update.php Diff File
mod - account_prof_edit_page.php Diff File
mod - account_prof_menu_page.php Diff File
mod - account_prof_update.php Diff File
mod - account_sponsor_page.php Diff File
mod - account_sponsor_update.php Diff File
mod - account_update.php Diff File
mod - admin/check/check_L10n_inc.php Diff File
mod - admin/check/check_anonymous_inc.php Diff File
mod - admin/check/check_api.php Diff File
mod - admin/check/check_attachments_inc.php Diff File
mod - admin/check/check_config_inc.php Diff File
mod - admin/check/check_crypto_inc.php Diff File
mod - admin/check/check_database_inc.php Diff File
mod - admin/check/check_display_inc.php Diff File
mod - admin/check/check_email_inc.php Diff File
mod - admin/check/check_i18n_inc.php Diff File
mod - admin/check/check_integrity_inc.php Diff File
mod - admin/check/check_paths_inc.php Diff File
mod - admin/check/check_php_inc.php Diff File
mod - admin/check/index.php Diff File
mod - admin/db_stats.php Diff File
mod - admin/email_queue.php Diff File
mod - admin/index.php Diff File
mod - admin/install.php Diff File
mod - admin/move_db2disk.php Diff File
mod - admin/schema.php Diff File
mod - admin/system_utils.php Diff File
mod - admin/test_langs.php Diff File
mod - admin/upgrade_unattended.php Diff File
mod - admin/upgrade_warning.php Diff File
mod - billing_page.php Diff File
mod - browser_search_plugin.php Diff File
mod - bug_actiongroup.php Diff File
mod - bug_actiongroup_add_note_inc.php Diff File
mod - bug_actiongroup_attach_tags_inc.php Diff File
mod - bug_actiongroup_ext.php Diff File
mod - bug_actiongroup_ext_page.php Diff File
mod - bug_actiongroup_page.php Diff File
mod - bug_actiongroup_update_product_build_inc.php Diff File
mod - bug_actiongroup_update_severity_inc.php Diff File
mod - bug_change_status_page.php Diff File
mod - bug_file_add.php Diff File
mod - bug_file_delete.php Diff File
mod - bug_monitor_add.php Diff File
mod - bug_monitor_delete.php Diff File
mod - bug_relationship_add.php Diff File
mod - bug_relationship_delete.php Diff File
mod - bug_relationship_graph.php Diff File
mod - bug_relationship_graph_img.php Diff File
mod - bug_reminder.php Diff File
mod - bug_reminder_page.php Diff File
mod - bug_report.php Diff File
rm - bug_report_advanced_page.php Diff
mod - bug_report_page.php Diff File
mod - bug_revision_drop.php Diff File
mod - bug_revision_view_page.php Diff File
mod - bug_set_sponsorship.php Diff File
mod - bug_stick.php Diff File
mod - bug_update.php Diff File
rm - bug_update_advanced_page.php Diff
mod - bug_update_page.php Diff File
mod - bug_view_advanced_page.php Diff File
mod - bug_view_page.php Diff File
mod - bugnote_add.php Diff File
mod - bugnote_add_inc.php Diff File
mod - bugnote_delete.php Diff File
mod - bugnote_edit_page.php Diff File
mod - bugnote_set_view_state.php Diff File
mod - bugnote_update.php Diff File
mod - changelog_page.php Diff File
mod - core.php Diff File
mod - core/authentication_api.php Diff File
mod - core/bug_api.php Diff File
mod - core/bug_group_action_api.php Diff File
mod - core/bug_revision_api.php Diff File
mod - core/bugnote_api.php Diff File
mod - core/category_api.php Diff File
mod - core/cfdefs/cfdef_standard.php Diff File
mod - core/classes/MantisBug.class.php Diff File
mod - core/classes/MantisBugRelationshipData.class.php Diff File
mod - core/classes/MantisCaptcha.class.php Diff File
mod - core/classes/MantisColumn.class.php Diff File
mod - core/classes/MantisCorePlugin.class.php Diff File
mod - core/classes/MantisCoreWikiPlugin.class.php Diff File
mod - core/classes/MantisDatabase/MantisDatabase.class.php Diff File
mod - core/classes/MantisDatabase/PDO/Mysql/Mysql.class.php Diff File
mod - core/classes/MantisDatabase/PDO/PDO.class.php Diff File
mod - core/classes/MantisDatabaseDict/MantisDatabaseDict.class.php Diff File
mod - core/classes/MantisDatabaseException.class.php Diff File
mod - core/classes/MantisEnum.class.php Diff File
mod - core/classes/MantisError.class.php Diff File
mod - core/classes/MantisException.class.php Diff File
mod - core/classes/MantisFilter.class.php Diff File
mod - core/classes/MantisFormattingPlugin.class.php Diff File
mod - core/classes/MantisLanguage.class.php Diff File
mod - core/classes/MantisPlugin.class.php Diff File
mod - core/classes/MantisUser.class.php Diff File
mod - core/classes/MantisWikiPlugin.class.php Diff File
mod - core/columns_api.php Diff File
mod - core/config_api.php Diff File
mod - core/constant_inc.php Diff File
mod - core/current_user_api.php Diff File
mod - core/custom_function_api.php Diff File
mod - core/database_api.php Diff File
mod - core/email_queue_api.php Diff File
mod - core/event_api.php Diff File
mod - core/file_api.php Diff File
mod - core/graphviz_api.php Diff File
mod - core/lang_api.php Diff File
mod - core/logging_api.php Diff File
mod - core/news_api.php Diff File
mod - core/php_api.php Diff File
mod - core/plugin_api.php Diff File
mod - core/print_api.php Diff File
mod - core/profile_api.php Diff File
mod - core/project_api.php Diff File
mod - core/relationship_api.php Diff File
mod - core/session_api.php Diff File
mod - core/sponsorship_api.php Diff File
mod - core/user_api.php Diff File
mod - core/user_pref_api.php Diff File
mod - core/version_api.php Diff File
mod - css/common_config.php Diff File
mod - css/status_config.php Diff File
mod - file_download.php Diff File
mod - index.php Diff File
mod - issues_rss.php Diff File
mod - javascript_config.php Diff File
mod - javascript_translations.php Diff File
mod - jump_to_bug.php Diff File
mod - login.php Diff File
mod - login_anon.php Diff File
mod - login_cookie_test.php Diff File
mod - login_page.php Diff File
mod - login_select_proj_page.php Diff File
mod - logout_page.php Diff File
mod - lost_pwd.php Diff File
mod - lost_pwd_page.php Diff File
mod - main_page.php Diff File
mod - make_captcha_img.php Diff File
mod - manage/adm_config_delete.php Diff File
mod - manage/adm_config_report.php Diff File
mod - manage/adm_config_set.php Diff File
mod - manage/adm_permissions_report.php Diff File
mod - manage/columns_copy.php Diff File
mod - manage/columns_inc.php Diff File
mod - manage/config_columns_page.php Diff File
mod - manage/config_columns_reset.php Diff File
mod - manage/config_columns_set.php Diff File
mod - manage/config_email_page.php Diff File
mod - manage/config_email_set.php Diff File
mod - manage/config_revert.php Diff File
mod - manage/config_work_threshold_page.php Diff File
mod - manage/config_work_threshold_set.php Diff File
mod - manage/config_workflow_graph_page.php Diff File
mod - manage/config_workflow_page.php Diff File
mod - manage/config_workflow_set.php Diff File
mod - manage/custom_field_create.php Diff File
mod - manage/custom_field_delete.php Diff File
mod - manage/custom_field_edit_page.php Diff File
mod - manage/custom_field_page.php Diff File
mod - manage/custom_field_proj_add.php Diff File
mod - manage/custom_field_update.php Diff File
mod - manage/overview_page.php Diff File
mod - manage/plugin_install.php Diff File
mod - manage/plugin_page.php Diff File
mod - manage/plugin_uninstall.php Diff File
mod - manage/plugin_update.php Diff File
mod - manage/plugin_upgrade.php Diff File
mod - manage/proj_cat_add.php Diff File
mod - manage/proj_cat_copy.php Diff File
mod - manage/proj_cat_delete.php Diff File
mod - manage/proj_cat_edit_page.php Diff File
mod - manage/proj_cat_update.php Diff File
mod - manage/proj_create.php Diff File
mod - manage/proj_create_page.php Diff File
mod - manage/proj_custom_field_add_existing.php Diff File
mod - manage/proj_custom_field_copy.php Diff File
mod - manage/proj_custom_field_remove.php Diff File
mod - manage/proj_custom_field_update.php Diff File
mod - manage/proj_delete.php Diff File
mod - manage/proj_edit_page.php Diff File
mod - manage/proj_page.php Diff File
mod - manage/proj_subproj_add.php Diff File
mod - manage/proj_subproj_delete.php Diff File
mod - manage/proj_update.php Diff File
mod - manage/proj_update_children.php Diff File
mod - manage/proj_user_add.php Diff File
mod - manage/proj_user_copy.php Diff File
mod - manage/proj_user_remove.php Diff File
mod - manage/proj_ver_add.php Diff File
mod - manage/proj_ver_copy.php Diff File
mod - manage/proj_ver_delete.php Diff File
mod - manage/proj_ver_edit_page.php Diff File
mod - manage/proj_ver_update.php Diff File
mod - manage/tags_page.php Diff File
mod - manage/user_create.php Diff File
mod - manage/user_create_page.php Diff File
mod - manage/user_delete.php Diff File
mod - manage/user_edit_page.php Diff File
mod - manage/user_page.php Diff File
mod - manage/user_proj_add.php Diff File
mod - manage/user_proj_delete.php Diff File
mod - manage/user_prune.php Diff File
mod - manage/user_reset.php Diff File
mod - manage/user_update.php Diff File
mod - my_view_inc.php Diff File
mod - my_view_page.php Diff File
mod - news_add.php Diff File
mod - news_edit_page.php Diff File
mod - news_list_page.php Diff File
mod - news_menu_page.php Diff File
mod - news_rss.php Diff File
mod - news_update.php Diff File
mod - news_view_page.php Diff File
mod - permalink_page.php Diff File
mod - plugin.php Diff File
mod - plugin_file.php Diff File
mod - plugins/MantisGraph/core/graph_api.php Diff File
mod - plugins/MantisGraph/pages/bug_graph_bycategory.php Diff File
mod - plugins/MantisGraph/pages/bug_graph_bystatus.php Diff File
mod - plugins/MantisGraph/pages/bug_graph_page.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bycategory.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bycategory_pct.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bydeveloper.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bypriority.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bypriority_mix.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bypriority_pct.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_byreporter.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_byresolution.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_byresolution_mix.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_byresolution_pct.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_byseverity.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_byseverity_mix.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_byseverity_pct.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bystatus.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_bystatus_pct.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_cumulative_bydate.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_cumulative_bydate2.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_imp_category.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_imp_priority.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_imp_resolution.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_imp_severity.php Diff File
mod - plugins/MantisGraph/pages/summary_graph_imp_status.php Diff File
mod - plugins/MantisGraph/pages/summary_jpgraph_page.php Diff File
mod - plugins/XmlImportExport/XmlImportExport.php Diff File
mod - print_all_bug_options_inc.php Diff File
mod - print_all_bug_options_page.php Diff File
mod - print_all_bug_options_reset.php Diff File
mod - print_all_bug_options_update.php Diff File
mod - print_all_bug_page.php Diff File
mod - print_all_bug_page_word.php Diff File
mod - print_bug_page.php Diff File
mod - proj_doc_add.php Diff File
mod - proj_doc_add_page.php Diff File
mod - proj_doc_delete.php Diff File
mod - proj_doc_edit_page.php Diff File
mod - proj_doc_page.php Diff File
mod - proj_doc_update.php Diff File
mod - project_page.php Diff File
mod - query_delete.php Diff File
mod - query_delete_page.php Diff File
mod - query_store.php Diff File
mod - query_store_page.php Diff File
mod - query_view_page.php Diff File
mod - return_dynamic_filters.php Diff File
mod - roadmap_page.php Diff File
mod - scripts/send_emails.php Diff File
mod - search.php Diff File
mod - set_project.php Diff File
mod - signup.php Diff File
mod - signup_page.php Diff File
mod - summary_page.php Diff File
mod - tag_attach.php Diff File
mod - tag_create.php Diff File
mod - tag_delete.php Diff File
mod - tag_detach.php Diff File
mod - tag_update.php Diff File
mod - tag_update_page.php Diff File
mod - tag_view_page.php Diff File
mod - tests/AllTests.php Diff File
mod - tests/Mantis/AllTests.php Diff File
mod - tests/Mantis/EnumTest.php Diff File
mod - tests/Mantis/StringTest.php Diff File
mod - tests/TestConfig.php Diff File
rm - tests/soap/AllTests.php Diff
rm - tests/soap/AttachmentTest.php Diff
rm - tests/soap/CategoryTest.php Diff
rm - tests/soap/CompressionTest.php Diff
rm - tests/soap/EnumTest.php Diff
rm - tests/soap/FilterTest.php Diff
rm - tests/soap/IssueAddTest.php Diff
rm - tests/soap/IssueMonitorTest.php Diff
rm - tests/soap/IssueNoteTest.php Diff
rm - tests/soap/IssueUpdateTest.php Diff
rm - tests/soap/LoginTest.php Diff
rm - tests/soap/ProjectTest.php Diff
rm - tests/soap/RelationshipTest.php Diff
rm - tests/soap/SoapBase.php Diff
rm - tests/soap/VersionTest.php Diff
mod - tests/test_config_get_set.php Diff File
mod - verify.php Diff File
mod - view.php Diff File
mod - view_all_bug_page.php Diff File
mod - view_all_inc.php Diff File
mod - view_all_set.php Diff File
mod - view_filters_page.php Diff File
mod - view_user_page.php Diff File
mod - wiki.php Diff File
mod - workflow_graph_img.php Diff File
mod - xmlhttprequest.php Diff File

master-1.2.x 60d94727

2012-06-04 04:00

siebrand


Details Diff
Localisation updates from http://translatewiki.net.
mod - lang/strings_breton.txt Diff File
mod - lang/strings_bulgarian.txt Diff File
mod - lang/strings_catalan.txt Diff File
mod - lang/strings_chinese_simplified.txt Diff File
mod - lang/strings_chinese_traditional.txt Diff File
mod - lang/strings_czech.txt Diff File
mod - lang/strings_danish.txt Diff File
mod - lang/strings_estonian.txt Diff File
mod - lang/strings_finnish.txt Diff File
mod - lang/strings_french.txt Diff File
mod - lang/strings_hungarian.txt Diff File
mod - lang/strings_icelandic.txt Diff File
mod - lang/strings_interlingua.txt Diff File
mod - lang/strings_italian.txt Diff File
mod - lang/strings_japanese.txt Diff File
mod - lang/strings_latvian.txt Diff File
mod - lang/strings_lithuanian.txt Diff File
mod - lang/strings_macedonian.txt Diff File
mod - lang/strings_norwegian_bokmal.txt Diff File
mod - lang/strings_occitan.txt Diff File
mod - lang/strings_polish.txt Diff File
mod - lang/strings_portuguese_brazil.txt Diff File
mod - lang/strings_portuguese_standard.txt Diff File
mod - lang/strings_romanian.txt Diff File
mod - lang/strings_russian.txt Diff File
mod - lang/strings_serbian.txt Diff File
mod - lang/strings_serbian_latin.txt Diff File
mod - lang/strings_slovak.txt Diff File
mod - lang/strings_slovene.txt Diff File
mod - lang/strings_spanish.txt Diff File
mod - lang/strings_swedish.txt Diff File
mod - lang/strings_swissgerman.txt Diff File
mod - lang/strings_turkish.txt Diff File
mod - lang/strings_ukrainian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_breton.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_bulgarian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_catalan.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_chinese_simplified.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_chinese_traditional.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_czech.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_finnish.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_french.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_hungarian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_interlingua.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_italian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_lithuanian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_macedonian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_norwegian_bokmal.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_occitan.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_polish.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_portuguese_brazil.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_portuguese_standard.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_romanian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_russian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_serbian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_serbian_latin.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_slovak.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_spanish.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_swedish.txt Diff File
mod - plugins/MantisGraph/lang/strings_breton.txt Diff File
mod - plugins/MantisGraph/lang/strings_bulgarian.txt Diff File
mod - plugins/MantisGraph/lang/strings_catalan.txt Diff File
mod - plugins/MantisGraph/lang/strings_chinese_simplified.txt Diff File
mod - plugins/MantisGraph/lang/strings_chinese_traditional.txt Diff File
mod - plugins/MantisGraph/lang/strings_czech.txt Diff File
mod - plugins/MantisGraph/lang/strings_danish.txt Diff File
mod - plugins/MantisGraph/lang/strings_estonian.txt Diff File
mod - plugins/MantisGraph/lang/strings_finnish.txt Diff File
mod - plugins/MantisGraph/lang/strings_french.txt Diff File
mod - plugins/MantisGraph/lang/strings_hungarian.txt Diff File
mod - plugins/MantisGraph/lang/strings_interlingua.txt Diff File
mod - plugins/MantisGraph/lang/strings_italian.txt Diff File
mod - plugins/MantisGraph/lang/strings_lithuanian.txt Diff File
mod - plugins/MantisGraph/lang/strings_macedonian.txt Diff File
mod - plugins/MantisGraph/lang/strings_norwegian_bokmal.txt Diff File
mod - plugins/MantisGraph/lang/strings_occitan.txt Diff File
mod - plugins/MantisGraph/lang/strings_polish.txt Diff File
mod - plugins/MantisGraph/lang/strings_portuguese_brazil.txt Diff File
mod - plugins/MantisGraph/lang/strings_portuguese_standard.txt Diff File
mod - plugins/MantisGraph/lang/strings_romanian.txt Diff File
mod - plugins/MantisGraph/lang/strings_russian.txt Diff File
mod - plugins/MantisGraph/lang/strings_serbian.txt Diff File
mod - plugins/MantisGraph/lang/strings_serbian_latin.txt Diff File
mod - plugins/MantisGraph/lang/strings_slovak.txt Diff File
mod - plugins/MantisGraph/lang/strings_spanish.txt Diff File
mod - plugins/MantisGraph/lang/strings_swedish.txt Diff File
mod - plugins/XmlImportExport/lang/strings_breton.txt Diff File
mod - plugins/XmlImportExport/lang/strings_bulgarian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_catalan.txt Diff File
mod - plugins/XmlImportExport/lang/strings_chinese_simplified.txt Diff File
mod - plugins/XmlImportExport/lang/strings_chinese_traditional.txt Diff File
mod - plugins/XmlImportExport/lang/strings_czech.txt Diff File
mod - plugins/XmlImportExport/lang/strings_finnish.txt Diff File
mod - plugins/XmlImportExport/lang/strings_french.txt Diff File
mod - plugins/XmlImportExport/lang/strings_hungarian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_interlingua.txt Diff File
mod - plugins/XmlImportExport/lang/strings_italian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_lithuanian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_macedonian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_norwegian_bokmal.txt Diff File
mod - plugins/XmlImportExport/lang/strings_occitan.txt Diff File
mod - plugins/XmlImportExport/lang/strings_polish.txt Diff File
mod - plugins/XmlImportExport/lang/strings_portuguese_brazil.txt Diff File
mod - plugins/XmlImportExport/lang/strings_portuguese_standard.txt Diff File
mod - plugins/XmlImportExport/lang/strings_romanian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_russian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_serbian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_serbian_latin.txt Diff File
mod - plugins/XmlImportExport/lang/strings_slovak.txt Diff File
mod - plugins/XmlImportExport/lang/strings_spanish.txt Diff File
mod - plugins/XmlImportExport/lang/strings_swedish.txt Diff File

master a12d6b7c

2012-06-04 00:26

dregad


Details Diff
Revert "Don't throw error when using db_fetch_array on empty resultset"

As per grangeway's comment and confirmed by vincent_sels (original
issue's reporter), this change is actually not necessary.

This reverts commit 33170d2d54643e63b1a60b021dcb0cbbb45e4157.

Affects 0014336
Affected Issues
0014336
mod - core/database_api.php Diff File

master-1.2.x 7b087923

2012-06-04 00:13

dregad


Details Diff
Revert "Don't throw error when using db_fetch_array on empty resultset"

As per grangeway's comment and confirmed by vincent_sels (original
issue's reporter), this change is actually not necessary.

This reverts commit 9b1a282b239dea4095863ed71ac9e129592522a2.

Affects 0014336
Affected Issues
0014336
mod - core/database_api.php Diff File

master 15a5d6a3

2012-06-03 11:29

dregad


Details Diff
mc_issue_note_update passing wrong param to access check function

Commit edc8142bb8ac0ac0df1a3824d78c15f4015d959e introduced proper logic
to avoid unauthorized update of bugnotes, but was passing incorrect
parameters to access_has_bugnote_level() so unprivileged users could
still update them.

Fixes 0014340
Affected Issues
0014340
mod - api/soap/mc_issue_api.php Diff File

master-1.2.x 175d9731

2012-06-03 11:29

dregad


Details Diff
mc_issue_note_update passing wrong param to access check function

Commit edc8142bb8ac0ac0df1a3824d78c15f4015d959e introduced proper logic
to avoid unauthorized update of bugnotes, but was passing incorrect
parameters to access_has_bugnote_level() so unprivileged users could
still update them.

Fixes 0014340
Affected Issues
0014340
mod - api/soap/mc_issue_api.php Diff File

master 473542ec

2012-06-03 11:23

dregad


Details Diff
Fix misleading exception in mc_issue_note_update()

The error message was referring to 'Issue' instead of 'Issue Note' id.
mod - api/soap/mc_issue_api.php Diff File

master-1.2.x 56542529

2012-06-03 11:23

dregad


Details Diff
Fix misleading exception in mc_issue_note_update()

The error message was referring to 'Issue' instead of 'Issue Note' id.
mod - api/soap/mc_issue_api.php Diff File

master c888b759

2012-06-03 11:16

dregad


Details Diff
Fix whitespace in mc_issue_api.php
mod - api/soap/mc_issue_api.php Diff File

master-1.2.x 765035a1

2012-06-03 11:16

dregad


Details Diff
Fix whitespace in mc_issue_api.php
mod - api/soap/mc_issue_api.php Diff File

master 75568c53

2012-06-03 00:53

atrol


Details Diff
Additional patch to fix 0014016

First patch to fix the issue introduced access to undefined variable.
Affected Issues
0014016
mod - api/soap/mc_issue_attachment_api.php Diff File

master-1.2.x c9314184

2012-06-03 00:51

atrol


Details Diff
Additional patch to fix 0014016

First patch to fix the issue introduced access to undefined variable.
Affected Issues
0014016
mod - api/soap/mc_issue_attachment_api.php Diff File

master 31d11568

2012-06-02 00:35

dhx


Details Diff
Fix 0014015: attachment deletion: remove update_bug_threshold check

As reported by Roland Becker (MantisBT developer):

Although configuration option allow_delete_own_attachments is set to ON
reporters cannot delete their own attachments. After pushing the delete
button you get "Access Denied"

Issue 0014016 implemented correct attachment deletion access control
checks against delete_attachments_threshold. We should be using this
threshold instead of update_bug_threshold because attachments aren't
linked to the core fields of an issue -- they are frequently related to
comments (bugnotes) provided by less privileged users.

$g_allow_delete_own_attachments should now work again... safely.
Affected Issues
0014015, 0014016
mod - api/soap/mc_issue_attachment_api.php Diff File
mod - bug_file_delete.php Diff File

master-1.2.x 628e9370

2012-06-02 00:35

dhx


Details Diff
Fix 0014015: attachment deletion: remove update_bug_threshold check

As reported by Roland Becker (MantisBT developer):

Although configuration option allow_delete_own_attachments is set to ON
reporters cannot delete their own attachments. After pushing the delete
button you get "Access Denied"

Issue 0014016 implemented correct attachment deletion access control
checks against delete_attachments_threshold. We should be using this
threshold instead of update_bug_threshold because attachments aren't
linked to the core fields of an issue -- they are frequently related to
comments (bugnotes) provided by less privileged users.

$g_allow_delete_own_attachments should now work again... safely.

Conflicts:
bug_file_delete.php
Affected Issues
0014015, 0014016
mod - api/soap/mc_issue_attachment_api.php Diff File
mod - bug_file_delete.php Diff File

master f82f98cc

2012-06-02 00:10

dhx


Details Diff
Fix 0014016: delete_attachments_threshold is not checked

Roland Becker (MantisBT developer) reported the following
security/access control bug:

In a default installation delete_attachments_threshold is set to
DEVELOPER but having access level >= update_bug_threshold is enough to
delete attachments if form_security_validation is set to OFF.

MantisBT was not checking the access level of the user requesting
deletion of an attachment to an issue against
$g_delete_attachments_threshold.

The new access control logic for deleting an issue attachment is now:
1. Does the user have an access level of at least update_bug_threshold?
2. If the user is the owner of the file and
$g_allow_delete_own_attachments=OFF, does this user have an access level
of at least delete_attachments_threshold?
3. If the user is not the owner of the file, do they have an access
level of at least delete_attachments_threshold?

Also refer to issue 0014015 for discussion on whether
update_bug_threshold should be part of the access control logic.

The relevant SOAP API call has also been updated.

Conflicts:
bug_file_delete.php
Affected Issues
0014015, 0014016
mod - api/soap/mc_issue_attachment_api.php Diff File
mod - bug_file_delete.php Diff File

master-1.2.x ceafe6f0

2012-06-02 00:10

dhx


Details Diff
Fix 0014016: delete_attachments_threshold is not checked

Roland Becker (MantisBT developer) reported the following
security/access control bug:

In a default installation delete_attachments_threshold is set to
DEVELOPER but having access level >= update_bug_threshold is enough to
delete attachments if form_security_validation is set to OFF.

MantisBT was not checking the access level of the user requesting
deletion of an attachment to an issue against
$g_delete_attachments_threshold.

The new access control logic for deleting an issue attachment is now:
1. Does the user have an access level of at least update_bug_threshold?
2. If the user is the owner of the file and
$g_allow_delete_own_attachments=OFF, does this user have an access level
of at least delete_attachments_threshold?
3. If the user is not the owner of the file, do they have an access
level of at least delete_attachments_threshold?

Also refer to issue 0014015 for discussion on whether
update_bug_threshold should be part of the access control logic.

The relevant SOAP API call has also been updated.
Affected Issues
0014015, 0014016
mod - api/soap/mc_issue_attachment_api.php Diff File
mod - bug_file_delete.php Diff File

master 8208170b

2012-06-01 22:46

dhx


Details Diff
Fix 0014342: mc_issue_api functions do not perform read only checks

Various SOAP functions in mc_issue_api.php did not perform checks to
ensure that read only issues are unmodifiable.
Affected Issues
0014342
mod - api/soap/mc_issue_api.php Diff File

master-1.2.x 804f6ed6

2012-06-01 22:46

dhx


Details Diff
Fix 0014342: mc_issue_api functions do not perform read only checks

Various SOAP functions in mc_issue_api.php did not perform checks to
ensure that read only issues are unmodifiable.
Affected Issues
0014342
mod - api/soap/mc_issue_api.php Diff File

master 508cab00

2012-06-01 20:40

dhx


Details Diff
Fix 0014340: Reporters can use SOAP to update bugnotes without permission

The access checks inside bugnote_update.php and
api/soap/mc_issue_api.php differed. Users were incorrectly allowed via
the SOAP interface to update the bugnotes of other users. Instead of
comparing the SOAP user's access level to $g_update_bugnote_threshold,
$g_add_bugnote_threshold was used instead.

This posed a problem because the default installed state of MantisBT is
to allow the REPORTER access level to submit bugs via the SOAP API. Thus
in the default installed state, any user who could submit a bug could
also update/modify the bugnotes of any other user.

Access checks within bugnote_update.php and api/soap/mc_issue_api.php
should now be equivalent.

Thanks to Roland Becker and Damien Regard (both MantisBT developers) for
finding and reporting this problem.
Affected Issues
0014340
mod - api/soap/mc_issue_api.php Diff File

master-1.2.x edc8142b

2012-06-01 20:40

dhx


Details Diff
Fix 0014340: Reporters can use SOAP to update bugnotes without permission

The access checks inside bugnote_update.php and
api/soap/mc_issue_api.php differed. Users were incorrectly allowed via
the SOAP interface to update the bugnotes of other users. Instead of
comparing the SOAP user's access level to $g_update_bugnote_threshold,
$g_add_bugnote_threshold was used instead.

This posed a problem because the default installed state of MantisBT is
to allow the REPORTER access level to submit bugs via the SOAP API. Thus
in the default installed state, any user who could submit a bug could
also update/modify the bugnotes of any other user.

Access checks within bugnote_update.php and api/soap/mc_issue_api.php
should now be equivalent.

Thanks to Roland Becker and Damien Regard (both MantisBT developers) for
finding and reporting this problem.
Affected Issues
0014340
mod - api/soap/mc_issue_api.php Diff File

master bbc8e9be

2012-06-01 19:34

dhx


Details Diff
Bug and bugnote access level checks should use project settings

Calls to config_get to retrieve configuration values should include the
relevant project ID to ensure that project-specific bugnote/bug
thresholds are taken into consideration over global settings.

An erronous use of the REPORTER constant has also been replaced. This
allows for valid/correct use of custom access levels in relation to the
$g_limit_reporters=ON functionality.
mod - core/access_api.php Diff File

master-1.2.x 8e5faf8c

2012-06-01 19:34

dhx


Details Diff
Bug and bugnote access level checks should use project settings

Calls to config_get to retrieve configuration values should include the
relevant project ID to ensure that project-specific bugnote/bug
thresholds are taken into consideration over global settings.

An erronous use of the REPORTER constant has also been replaced. This
allows for valid/correct use of custom access levels in relation to the
$g_limit_reporters=ON functionality.
mod - core/access_api.php Diff File

master-1.2.x 4c125ed8

2012-06-01 18:58

vboctor


Details Diff
Cleanup SOAP error handler which contained dead code.
mod - api/soap/mc_api.php Diff File

master ce7ec532

2012-06-01 18:58

vboctor


Details Diff
Cleanup SOAP error handler which contained dead code.
mod - api/soap/mc_api.php Diff File

master-1.2.x 01b4a042

2012-06-01 18:51

vboctor


Details Diff
Fixes 0014341: SOAP API is failing due to PHP errors that are ignored by the web app. Affected Issues
0014341
mod - api/soap/mc_api.php Diff File
 First  Prev  1 2 3 ... 80 ... 160 ... 240 ... 320 ... 386 387 388 389 390 391 392 ... 400 ... 480 ... 560 ... 640 ... 720 ... 762 763 764  Next  Last