MantisBT

View Issue Details Jump to Notes ] Wiki ] Related Changesets ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0011981mantisbtbugtrackerpublic2010-06-03 10:452013-04-06 09:26
ReporterSergiodf 
Assigned Todhx 
PrioritynormalSeverityminorReproducibilityalways
StatusresolvedResolutionfixed 
PlatformOSOS Version
Product Version1.2.1 
Target Version1.3.xFixed in Version1.3.x 
Summary0011981: Do not allow to send a reminder on a private issue to users under threshold
DescriptionIf $g_reminder_receive_threshold is set to a lower user category than $g_private_bug_threshold, bug_reminder_page.php allows to send a reminder on a private issue to a user that can not see it.
Tags2.0.x check
Attached Filesdiff file icon 11981.diff [^] (956 bytes) 2010-06-03 10:47 [Show Content]

- Relationships
related to 0015721new Functionality to consider porting to master-2.0.x 

-  Notes
User avatar (0025682)
Sergiodf (reporter)
2010-06-03 10:51

Oops... I forget to remove "echo"es on patch.
User avatar (0025953)
dhx (developer)
2010-06-23 00:30

Thanks Sergio, great catch! I've committed a fix ready for the next release.
User avatar (0036471)
grangeway (developer)
2013-04-05 17:57

Marking as 'acknowledged' not resolved/closed to track that change gets ported to master-2.0.x branch

- Related Changesets
MantisBT: master 11fb95de
Timestamp: 2010-06-23 04:23:21
Author: dhx
Details ] Diff ]
Fix 0011981: Factor in view status when showing user monitor list

When a user attempts to send a reminder to users about an issue they're
presented with a list of users from which they can select from. This
list of users is generated by determining the minimum access level
required to view the issue. However the view state of the issue was not
taken into consideration and thus if an issue had a private view state,
users without permission to view private issues would still be shown in
the user list.

Thanks to Sergio Del Franco for reporting this issue and providing a
patch.
mod - bug_reminder_page.php Diff ] File ]

- Issue History
Date Modified Username Field Change
2010-06-03 10:45 Sergiodf New Issue
2010-06-03 10:47 Sergiodf File Added: 11981.diff
2010-06-03 10:51 Sergiodf Note Added: 0025682
2010-06-03 12:38 jreese Status new => acknowledged
2010-06-03 12:38 jreese Target Version => 1.2.2
2010-06-23 00:16 dhx Assigned To => dhx
2010-06-23 00:16 dhx Status acknowledged => assigned
2010-06-23 00:17 dhx Target Version 1.2.2 => 1.3.x
2010-06-23 00:29 dhx Changeset attached => MantisBT master 11fb95de
2010-06-23 00:29 dhx Resolution open => fixed
2010-06-23 00:29 dhx Fixed in Version => 1.3.x
2010-06-23 00:30 dhx Note Added: 0025953
2010-06-23 00:30 dhx Status assigned => resolved
2013-04-05 17:57 grangeway Status resolved => acknowledged
2013-04-05 17:57 grangeway Note Added: 0036471
2013-04-05 18:07 grangeway Relationship added related to 0015721
2013-04-06 03:44 dregad Status acknowledged => resolved
2013-04-06 07:20 grangeway Status resolved => acknowledged
2013-04-06 09:26 dregad Tag Attached: 2.0.x check
2013-04-06 09:26 dregad Status acknowledged => resolved


MantisBT 1.2.16dev master-1.2.x-8c2bd07 [^]
Copyright © 2000 - 2013 MantisBT Team
Time: 0.1005 seconds.
memory usage: 2,822 KB
Powered by Mantis Bugtracker