View Issue Details

IDProjectCategoryView StatusLast Update
0025722mantisbtadministrationpublic2019-09-03 11:27
Reporterfubertosi Assigned Tocproensa  
Status closedResolutionfixed 
Product Version2.20.0 
Target Version2.21.1Fixed in Version2.21.1 
Summary0025722: Wrong access_level settings when updating rights in the project admin page

Since the 2.20.0 version, it's possible to update the attachement rights user/project in the admin page of the project, via the blue link [modify] (see pj)
But, when we use it, it updates the rights not only on the current project, but on all the projects that have an attachement to the user on which we are updating the rights. I picked up the sql request logged :

'UPDATE mantis_project_user_list_table SET access_level = 70 WHERE user_id = 208'

"and project_id=XXX " is missing!!

TagsNo tags attached.
Attached Files
MantisBT.jpg (3,281 bytes)   
MantisBT.jpg (3,281 bytes)   


related to 0005151 closeddregad Can't update user's project-specific access level 
has duplicate 0025752 closeddregad When changing role for a project the role is changed for every project 
has duplicate 0026107 closeddregad Mantis 2.21 - Bug on project_add_users 




2019-04-29 17:45

developer   ~0062013

Thanks @fubertosi
This is an embarrassing error. The fix is here:

Related Changesets

MantisBT: master 78b3a4f0

2019-04-29 13:39


Committer: dregad

Details Diff
Fix updating user access level for projects

Fix an error from PR 1449 where updating access level for a user in a
project, updates the access levels on all projects assigned to that
user. Missing project_id in the update query.

Fixes: 0025722
Affected Issues
mod - core/project_api.php Diff File