0024343: REST API returns too much info for default category handler

ID	Project	Category	View Status	Date Submitted	Last Update
0024343	mantisbt	api rest	public	2018-04-21 14:51	2018-04-29 19:21

Reporter	vboctor	Assigned To	vboctor
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	fixed
Product Version	2.13.2
Target Version	2.13.2	Fixed in Version	2.13.2

Summary	0024343: REST API returns too much info for default category handler
Description	When calling GET `/api/rest/projects` the categories include full user info rather than account reference info for default category handlers.
Tags	No tags attached.

vboctor 2018-04-21 14:53 manager ~0059625	PR: https://github.com/mantisbt/mantisbt/pull/1339

atrol 2018-04-22 11:04 developer ~0059635	I am wondering if default category handler is something that should be visible for users without a certain access level. E.g. I am not aware that you can get the default category handler via UI as a reporter, but you get it by using REST.

vboctor 2018-04-22 11:08 manager ~0059636	@atrol Good point, it likely should only be accessible to only users with project management access level to the project. However, it is a different issue, can you please open a different issue for it?

vboctor 2018-04-22 20:09 manager ~0059639	@atrol I have opened 0024346 and updated the pull request to fix it.

atrol 2018-04-23 16:34 developer ~0059656	Did a few tests and approved the PR.

MantisBT: master-2.13 8758ab82 2018-04-21 10:52 vboctor Details Diff	Use user account reference for category handler Fixes 0024343		Affected Issues 0024343
	mod - api/soap/mc_project_api.php		Diff File