View Issue Details

IDProjectCategoryView StatusLast Update
0030182mantisbtauthorizationpublic2022-05-10 09:56
Reporteratrol Assigned Toatrol  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Target Version2.25.4Fixed in Version2.25.4 
Summary0030182: Update issue icon on "View Issues" page is displayed even without having appropriate access rights
Description

On "View Issues" page, the icon / link to update an issue is displayed even if the user has no rights to update the issue ($g_update_bug_threshold)

This can happen if the current project is ALL_PROJECTS and the settting for ALL_PROJECTS is different from the setting of a specific project.

It's just a minor bug, as clicking the link gives "Access Denied" if the rights are missing.

TagsNo tags attached.

Relationships

related to 0030178 closedatrol Update issue icon on "My View" page is displayed even without having appropriate access rights 

Activities

atrol

atrol

2022-05-07 14:25

developer   ~0066546

PR https://github.com/mantisbt/mantisbt/pull/1807

dregad

dregad

2022-05-10 09:22

developer   ~0066554

Backported to 2.25.4 as it's a bug fix (even minor) and I'm getting ready to release that.

Related Changesets

MantisBT: master 9f38cd3b

2022-05-07 14:19

atrol

Details Diff
Fix access check on "View Issues" page

Fixes 0030182
Affected Issues
0030182
mod - core/columns_api.php Diff File

MantisBT: master-2.25 46feeb87

2022-05-07 14:19

atrol


Committer: dregad Details Diff
Fix access check on "View Issues" page

Fixes 0030182

Backported from 9f38cd3ba945156f8d90bcf72ce93f95dce711b4
Affected Issues
0030182
mod - core/columns_api.php Diff File