View Issue Details

WikiRelated ChangesetsJump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0016475mantisbtbugtrackerpublic2013-10-12 18:252014-12-08 02:07
Reporterdregad Assigned Todregad  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Product Version1.3.0dev 
Target Version1.3.0-beta.1 
Summary0016475: bug_update.php throws access denied when updater changes status
Description

An access denied error is triggered by BugData->__set as it tries to set target_version when the user does not have roadmap_update_threshold, even though the target version field was not available in the bug change status page, and was therefore not modified.

TagsNo tags attached.

Relationships

has duplicate 0012215 closeddregad Write to target_version field may fail due to unhandled access check 

Activities

There are no notes attached to this issue.

Related Changesets

MantisBT: master 9b449b4b

2013-10-12 14:27

dregad


Details Diff		 Fix access denied error in bug_update.php

It makes no sense to trigger this error when the value of target_version
is not being modified.

Fixes 0016475		 Affected Issues
0016475
mod - core/bug_api.php Diff File