MantisBT: master-1.2.x 6ede60d3

Author Committer Branch Timestamp Parent
dhx dhx master-1.2.x 2010-02-09 23:48:23 master-1.2.x 5b93161f
Affected Issues  0011481: Confusing combo on View Issue page
Changeset

Fix 0011481: Don't show bug group actions that can't be used

Currently the bug action group dropdown list on view_all_bug_page.php
shows (almost) every available option, even if the current user isn't
authorised to use those options.

This patch implements checking to see which options are available to the
user for the issues which are currently shown on view_all_bug_page.php.
Options are only displayed in the dropdown list if the user is able to
use the option on at least one of the bugs displayed.

Additionally, the logic behind when selection checkboxes are shown
alongside a bug has been improved. Checkboxes won't display next to bugs
that the user cannot perform group actions on.

Backported from master branch because it's needed to resolve an LFI/XSS
issue in bug_actiongroup_ext.php.

mod - core/bug_group_action_api.php Diff File
mod - core/columns_api.php Diff File
mod - core/print_api.php Diff File
mod - my_view_inc.php Diff File
mod - view_all_bug_page.php Diff File
mod - view_all_inc.php Diff File