0030178: Update issue icon on "My View" page is displayed even without having appropriate access rights

ID	Project	Category	View Status	Date Submitted	Last Update
0030178	mantisbt	authorization	public	2022-05-07 11:37	2022-05-10 09:56

Reporter	atrol	Assigned To	atrol
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	fixed
Target Version	2.25.4	Fixed in Version	2.25.4

Summary	0030178: Update issue icon on "My View" page is displayed even without having appropriate access rights
Description	On "My View" page, the icon / link to update an issue is displayed even if the user has no rights to update the issue (`$g_update_bug_threshold`) This can happen if the current project is `ALL_PROJECTS` and the settting for `ALL_PROJECTS` is different from the setting of a specific project. It's just a minor bug, as clicking the link gives "Access Denied" if the rights are missing.
Tags	No tags attached.

MantisBT: master 1f687ffd 2022-05-07 11:37 atrol Details Diff	Fix access check on "My View" Fixes 0030178	Affected Issues 0030178
	mod - my_view_inc.php	Diff File
MantisBT: master-2.25 ee837063 2022-05-07 11:37 atrol Committer: dregad Details Diff	Fix access check on "My View" Fixes 0030178 Backported from 1f687ffd1ee7acbc08dd9fb7edd6fe6125b7731c	Affected Issues 0030178
	mod - my_view_inc.php	Diff File

atrol 2022-05-07 11:46 developer ~0066543	PR https://github.com/mantisbt/mantisbt/pull/1806

dregad 2022-05-10 09:22 developer ~0066553	Backported to 2.25.4 as it's a bug fix (even minor) and I'm getting ready to release that.