0030182: Update issue icon on "View Issues" page is displayed even without having appropriate access rights

ID	Project	Category	View Status	Date Submitted	Last Update
0030182	mantisbt	authorization	public	2022-05-07 14:18	2022-05-10 09:56

Reporter	atrol	Assigned To	atrol
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	fixed
Target Version	2.25.4	Fixed in Version	2.25.4

Summary	0030182: Update issue icon on "View Issues" page is displayed even without having appropriate access rights
Description	On "View Issues" page, the icon / link to update an issue is displayed even if the user has no rights to update the issue (`$g_update_bug_threshold`) This can happen if the current project is `ALL_PROJECTS` and the settting for `ALL_PROJECTS` is different from the setting of a specific project. It's just a minor bug, as clicking the link gives "Access Denied" if the rights are missing.
Tags	No tags attached.

MantisBT: master 9f38cd3b 2022-05-07 14:19 atrol Details Diff	Fix access check on "View Issues" page Fixes 0030182	Affected Issues 0030182
	mod - core/columns_api.php	Diff File
MantisBT: master-2.25 46feeb87 2022-05-07 14:19 atrol Committer: dregad Details Diff	Fix access check on "View Issues" page Fixes 0030182 Backported from 9f38cd3ba945156f8d90bcf72ce93f95dce711b4	Affected Issues 0030182
	mod - core/columns_api.php	Diff File

atrol 2022-05-07 14:25 developer ~0066546	PR https://github.com/mantisbt/mantisbt/pull/1807

dregad 2022-05-10 09:22 developer ~0066554	Backported to 2.25.4 as it's a bug fix (even minor) and I'm getting ready to release that.