aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2005-10-19 00:45:47 +0000
committerlpsolit%gmail.com <>2005-10-19 00:45:47 +0000
commit8d67e86a56de870d2a76f0bc5d0dfa53af664a73 (patch)
tree5406a0078d3d75838cc47fcf6004e37e1354abc1 /Bugzilla
parent59ef7920a7efaba7cf0e5b55eb85761b59c8aaa7 (diff)
downloadbugs-8d67e86a56de870d2a76f0bc5d0dfa53af664a73.tar
bugs-8d67e86a56de870d2a76f0bc5d0dfa53af664a73.tar.gz
bugs-8d67e86a56de870d2a76f0bc5d0dfa53af664a73.tar.bz2
bugs-8d67e86a56de870d2a76f0bc5d0dfa53af664a73.tar.xz
bugs-8d67e86a56de870d2a76f0bc5d0dfa53af664a73.zip
Bug 302936: Reject the requestee if he cannot access private attachments - Patch by Frédéric Buclin <LpSolit@gmail.com> r=jouni a=justdave
Diffstat (limited to 'Bugzilla')
-rw-r--r--Bugzilla/Flag.pm5
-rw-r--r--Bugzilla/FlagType.pm3
2 files changed, 7 insertions, 1 deletions
diff --git a/Bugzilla/Flag.pm b/Bugzilla/Flag.pm
index 34ded7dd2..54a8bea80 100644
--- a/Bugzilla/Flag.pm
+++ b/Bugzilla/Flag.pm
@@ -228,10 +228,13 @@ sub count {
=over
-=item C<validate($cgi, $bug_id)>
+=item C<validate($cgi, $bug_id, $attach_id)>
Validates fields containing flag modifications.
+If the attachment is new, it has no ID yet and $attach_id is set
+to -1 to force its check anyway.
+
=back
=cut
diff --git a/Bugzilla/FlagType.pm b/Bugzilla/FlagType.pm
index a7a32c5cc..950aeea9a 100644
--- a/Bugzilla/FlagType.pm
+++ b/Bugzilla/FlagType.pm
@@ -320,6 +320,9 @@ to extract flag type IDs from form field names by matching columns
whose name looks like "flag_type-nnn", where "nnn" is the ID,
and returning just the ID portion of matching field names.
+If the attachment is new, it has no ID yet and $attach_id is set
+to -1 to force its check anyway.
+
=back
=cut