View Issue Details

IDProjectCategoryView StatusLast Update
0034959mantisbtapi soappublic2025-03-01 18:40
Reportergthomas Assigned Tocommunity  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Product Version2.27.0 
Target Version2.27.1Fixed in Version2.27.1 
Summary0034959: Due date is deleted when the caller have no permission to modify it
Description

mc_issue_update deletes the due_date if does not have right to update it.

Additional Information

https://github.com/mantisbt/mantisbt/pull/2046

TagsNo tags attached.

Relationships

related to 0011015 closedrombert mc_issue_update erases 'Due date' field 

Activities

dregad

dregad

2024-11-09 08:20

developer   ~0069436

Thanks for the report and proposed fix. I can reproduce this.

  • user account has UPDATER role
  • $g_due_date_update_threshold = DEVELOPER;
  • Test issue with due_date set
$wsdl = 'http://localhost/mantis/api/soap/mantisconnect.php?wsdl';
$s = new SoapClient($wsdl);
$u = 'user';
$p = 'password';
$id = 123;
$issue = $s->mc_issue_get($u, $p, $id);
var_dump($issue->due_date); // string(25) "2024-11-13T13:17:00+00:00"
$issue = $s->mc_issue_update($u, $p, $id, $issue);
$issue = $s->mc_issue_get($u, $p, $id);
var_dump($issue->due_date); // NULL

Related Changesets

MantisBT: master-2.27 015cfc51

2024-11-09 08:24

gthomas

Committer: community


Details Diff
SOAP: Don't delete due_date if user is not allowed to modify it

Fixes 0034959, PR https://github.com/mantisbt/mantisbt/pull/2046

Signed-off-by: Damien Regad <dregad@mantisbt.org>
Affected Issues
0034959
mod - api/soap/mc_issue_api.php Diff File