View Issue Details

IDProjectCategoryView StatusLast Update
0008396mantisbttaggingpublic2007-12-21 23:16
Reportervboctor Assigned Tojreese  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Target Version1.1.0Fixed in Version1.1.0rc1 
Summary0008396: Don't allow creating tags if user can't attach them
Description

At the moment we do two checks for tagging, 1st is the access level for creating tags and second is the access level to attach them to the bug currently viewed. As in 0008368 we may succeed in creating but not attaching. There is no point in this. Hence, we should only create tags if we will be able to attach them.

I've changed the access level checking for attaching bugs to be dependent on the current bug/project. The access level checking for creating tags is currently global, since tags are global.

TagsNo tags attached.

Activities

jreese

jreese

2007-09-28 20:44

reporter   ~0015761

I've committed changes to CVS that furthers Victor's changes to use bug level permissions for both attaching and detaching tags. From what I could see, there is no point of entry that checks create permission before/without checking attach permissions.

jreese

jreese

2007-10-02 10:37

reporter   ~0015792

As far as I can tell, this issue was resolved between the combination of changes by Victor and me. If this is incorrect, please reopen this issue with more details.

Related Changesets

MantisBT: master b2ea92da

2007-09-28 20:35

jreese


Details Diff
Fix 0008396: Don't allow creating tags if user can't attach them
(note) bug_view_advanced_page.php, bug_view_page.php and tag_attach.php were committed
in error without this info.

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@4600 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9
Affected Issues
0008396
mod - tag_detach.php Diff File