0025722: Wrong access_level settings when updating rights in the project admin page

ID	Project	Category	View Status	Date Submitted	Last Update
0025722	mantisbt	administration	public	2019-04-29 10:39	2019-09-03 11:27

Reporter	fubertosi	Assigned To	cproensa
Priority	normal	Severity	major	Reproducibility	always
Status	closed	Resolution	fixed
Product Version	2.20.0
Target Version	2.21.1	Fixed in Version	2.21.1

Summary	0025722: Wrong access_level settings when updating rights in the project admin page
Description	Since the 2.20.0 version, it's possible to update the attachement rights user/project in the admin page of the project, via the blue link [modify] (see pj) But, when we use it, it updates the rights not only on the current project, but on all the projects that have an attachement to the user on which we are updating the rights. I picked up the sql request logged : 'UPDATE mantis_project_user_list_table SET access_level = 70 WHERE user_id = 208' "and project_id=XXX " is missing!!
Tags	No tags attached.
Attached Files	MantisBT.jpg (3,281 bytes) MantisBT.jpg (3,281 bytes)

MantisBT: master 78b3a4f0 2019-04-29 13:39 cproensa Committer: dregad Details Diff	Fix updating user access level for projects Fix an error from PR 1449 where updating access level for a user in a project, updates the access levels on all projects assigned to that user. Missing project_id in the update query. Fixes: 0025722		Affected Issues 0025722
	mod - core/project_api.php		Diff File

related to	0005151	closed	dregad	Can't update user's project-specific access level
has duplicate	0025752	closed	dregad	When changing role for a project the role is changed for every project
has duplicate	0026107	closed	dregad	Mantis 2.21 - Bug on project_add_users

cproensa 2019-04-29 17:45 developer ~0062013	Thanks @fubertosi This is an embarrassing error. The fix is here: https://github.com/mantisbt/mantisbt/pull/1508