View Issue Details

IDProjectCategoryView StatusLast Update
0023505mantisbtfilterspublic2017-10-21 11:53
Reportercproensa Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Product Version2.8.0 
Summary0023505: Filtering by relationship, shows results for relations not viewable by the user

For example
issue A is viewable by the user
issue B is not viewable.
both issues have a relation.

User searchs for "issues related to B", and gets A as a result.
If the relation is not visible to the user, this result shouldn't be shown.

TagsNo tags attached.




2017-10-21 11:53

developer   ~0058010

The impact for this is very low: it's reproducible only by knowing the id of the "invisible" bug id beforehand.

Fixing this at the filter query may be complicated. Maybe it's easier by building the query with CTEs:
visible_bugs AS (...)

But that is not implemented in all supported databases:
mysql >= v8
mariadb >= 10.2.1

I think we can leave this as won't fix at this moment

Issue History

Date Modified Username Field Change
2017-10-19 13:47 cproensa New Issue
2017-10-21 11:53 cproensa Note Added: 0058010