MantisBT: master a4144388

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master 2012-10-12 18:37 master 85c132d3
Affected Issues  0014496: CVE-2012-5522 Workflow Transitions: Minimal Access Level to Change to this status has no correct 'default'
Changeset

Manage config workflow page does not reflect actual config

The code did not properly reflect the configuration state when building
the Access Levels form, if the minimum access level was defined using
update_bug_status_threshold and set_status_threshold wass empty, showing
'viewer' for each status except 'new'.

Consequently, saving the page without changes would cause the config to
be saved with all access levels as 'viewer'.

Fixes 0014496
mod - manage_config_workflow_page.php Diff File
mod - manage_config_workflow_set.php Diff File