View Issue Details

WikiRelated ChangesetsJump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0036515mantisbtadministrationpublic2025-10-20 08:542025-11-01 07:49
Reporterdregad Assigned Todregad  
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionfixed 
Target Version2.27.2Fixed in Version2.27.2 
Summary0036515: Hardcoded role instead of config in access level check on Manage Columns page
Description

The access level checks in manage_columns_copy.php to determine whether the user is allowed to copy columns configuration are done against a hardcoded value of MANAGER, instead of using the manage_project_threshold configuration option.

TagsNo tags attached.

Relationships

Relationship GraphDependency Graph
related to 0036502 closedatrol CVE-2025-62520: Ability to copy private project configurations (Columns) 
related to 0009050 closedvboctor Add support for "Copy Columns From/To" when customizing columns to view in View Issues, Print Issues, CSV, Excel 

Activities

There are no notes attached to this issue.

Related Changesets

MantisBT: master-2.27 7befcfd9

2025-10-20 09:06

dregad


Details Diff		 Use config threshold instead of hardcoded value

The access level checks to determine whether the user is allowed to copy
columns were done against a hardcoded value of MANAGER, instead of using
the `manage_project_threshold` configuration option.

Fixes 0036515		 Affected Issues
0036515
mod - manage_columns_copy.php Diff File