diff options
author | travis%sedsystems.ca <> | 2005-01-21 07:22:07 +0000 |
---|---|---|
committer | travis%sedsystems.ca <> | 2005-01-21 07:22:07 +0000 |
commit | 4f4c25bb8d7bacecad8f69363d96483ea92ffc32 (patch) | |
tree | 5cd1417f8950deb82704370283e1eb0bc5c5229b /post_bug.cgi | |
parent | 61a49f228204e2991aea7970c44efdd433f8c71b (diff) | |
download | bugs-4f4c25bb8d7bacecad8f69363d96483ea92ffc32.tar bugs-4f4c25bb8d7bacecad8f69363d96483ea92ffc32.tar.gz bugs-4f4c25bb8d7bacecad8f69363d96483ea92ffc32.tar.bz2 bugs-4f4c25bb8d7bacecad8f69363d96483ea92ffc32.tar.xz bugs-4f4c25bb8d7bacecad8f69363d96483ea92ffc32.zip |
Bug 266579 : Users without privs can confirm bugs by assigning to themselves first, without having canconfirm privs
Patch by LpSolit@gmail.com r=myk a=justdave
Diffstat (limited to 'post_bug.cgi')
-rwxr-xr-x | post_bug.cgi | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/post_bug.cgi b/post_bug.cgi index 3f2d32062..40111ff77 100755 --- a/post_bug.cgi +++ b/post_bug.cgi @@ -130,7 +130,7 @@ my $sql_product = SqlQuote($::FORM{'product'}); my $sql_component = SqlQuote($::FORM{'component'}); # Default assignee is the component owner. -if ($::FORM{'assigned_to'} eq "") { +if (!UserInGroup("editbugs") || $::FORM{'assigned_to'} eq "") { SendSQL("SELECT initialowner FROM components " . "WHERE id = $component_id"); $::FORM{'assigned_to'} = FetchOneColumn(); |