View Issue Details

IDProjectCategoryView StatusLast Update
0030178mantisbtauthorizationpublic2022-05-10 09:56
Reporteratrol Assigned Toatrol  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Target Version2.25.4Fixed in Version2.25.4 
Summary0030178: Update issue icon on "My View" page is displayed even without having appropriate access rights
Description

On "My View" page, the icon / link to update an issue is displayed even if the user has no rights to update the issue ($g_update_bug_threshold)

This can happen if the current project is ALL_PROJECTS and the settting for ALL_PROJECTS is different from the setting of a specific project.

It's just a minor bug, as clicking the link gives "Access Denied" if the rights are missing.

TagsNo tags attached.

Relationships

related to 0030182 closedatrol Update issue icon on "View Issues" page is displayed even without having appropriate access rights 

Activities

atrol

atrol

2022-05-07 11:46

developer   ~0066543

PR https://github.com/mantisbt/mantisbt/pull/1806

dregad

dregad

2022-05-10 09:22

developer   ~0066553

Backported to 2.25.4 as it's a bug fix (even minor) and I'm getting ready to release that.

Related Changesets

MantisBT: master 1f687ffd

2022-05-07 11:37

atrol


Details Diff
Fix access check on "My View"

Fixes 0030178
Affected Issues
0030178
mod - my_view_inc.php Diff File

MantisBT: master-2.25 ee837063

2022-05-07 11:37

atrol

Committer: dregad


Details Diff
Fix access check on "My View"

Fixes 0030178

Backported from 1f687ffd1ee7acbc08dd9fb7edd6fe6125b7731c
Affected Issues
0030178
mod - my_view_inc.php Diff File