Even if a user has no rights to see the changelog (e.g. user is reporter, but updater needed), he is able to access the changelog via url: http://server/mantis/changelog_page.php.
grangeway
2004-08-25 17:24
reporter ~0007162
This sounds like something that might be easy and good to fix before 0.19 Final Release
