0023502: Filter "assigned to" does not account for configuration "view_handler_threshold"

ID	Project	Category	View Status	Date Submitted	Last Update
0023502	mantisbt	filters	public	2017-10-19 13:17	2018-03-31 19:58

Reporter	cproensa	Assigned To	cproensa
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	closed	Resolution	fixed
Product Version	2.8.0
Target Version	2.13.0	Fixed in Version	2.13.0

Summary	0023502: Filter "assigned to" does not account for configuration "view_handler_threshold"
Description	Regarding filtering, view_handler_threshold only is used to hide the selectable users for this property, but this is weak as: 1) The value can be stored in the filter by other means than inputting from the filter dialog 2) The option is evaluated at current project level, but the filter may reach other projects where the configuration is different 3) Because of 2, a user with permission in a project can use the filter normally, and see results from subprojects where he is not privileged.
Tags	No tags attached.

MantisBT: master 71e74ef9 2017-10-19 15:52 cproensa Committer: dregad Details Diff	Use view handler threshold in filter query Fixes: 0023502		Affected Issues 0023502
	mod - core/classes/BugFilterQuery.class.php		Diff File