View Issue Details

WikiRelated ChangesetsJump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0002901mantisbtbugtrackerpublic2003-01-31 07:262003-12-13 04:49
ReporterreporterAssigned Tovboctor  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Product Versiongit trunk 
Summary0002901: Reporter cannot close their bugs
Description

Reporter are unable to close their bug, even if $g_allow_reporter_close is turned ON. It seems that there i no check for this in "bug_close_page.php".

Steps To Reproduce

Turn $g_allow_reporter_close ON in your Mantis configuration. Report sme bug. Wait for it resolving. Than you should have possibility to close it. "Close bug" button appears on BUG page, however after clicking on it, "Access Denied" message will be shown.

Additional Information

<code>
$ find ./ -type f -exec grep -Hi allow_reporter_close {} \;
./config_defaults_inc.php: $g_allow_reporter_close = OFF;
./config_inc.php:,$g_allow_reporter_close
./config_inc.php: $g_allow_reporter_close = ON;
./core/html_api.php: && ON == config_get( 'allow_reporter_close' ) ) ) {
$
</code>

It seems, that stuff around $g_allow_reporter_close is not finished with its implementation, since this variable ($g_allow_reporter_close) is used too less times in source codes.

Nepto, <a href="http://nepto.sk/">http://nepto.sk/</a>

TagsNo tags attached.

Activities

vboctor

vboctor

2003-02-13 05:24

manager   ~0003689

Fixed in CVS (will be in 0.18.0)

Related Changesets

MantisBT: master 8b206bcb

2003-02-13 08:24

vboctor


Details Diff		 M manage_user_create.php
- Fixed a problem where the user create page used to ask the user for confirmation that
the password is empty, even if it is not empty.

M core/access_api.php
- (access_can_close_bug): Checks if the current user can close the specified bug.
This is true if the user is the reporter of the bug and the reporters can close bugs or
if the user's access level is above the required threshold.
- (access_ensure_can_close_bug): Calls access_can_close_bug(), and if it fails, it calls
access_denied().

M bug_close.php
M bug_close_page.php
M bug_view_advanced_page.php
M bug_view_page.php
- Made use of the added functions in access_api to allow reporters to close their own
bugs, if $g_allow_reporter_close is set to ON. This is a fix to bug 0002901.

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1833 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9		 Affected Issues
0002901
mod - bug_view_page.php Diff File
mod - bug_close_page.php Diff File
mod - bug_view_advanced_page.php Diff File
mod - manage_user_create.php Diff File
mod - bug_close.php Diff File
mod - core/access_api.php Diff File