From f9ad36979ee316009fe69972da97702ec14110ce Mon Sep 17 00:00:00 2001 From: "endico%mozilla.org" <> Date: Tue, 13 Mar 2001 06:35:50 +0000 Subject: Checking in Jake's interim patches from bug 30694. Bugzilla was showing bug summaries to everyone, even if they didn't have permission to view the bug. Jake's quick solution is to not display the bug at all if it is in a group no matter who is viewing it. The correct solution would be display the summary if the viewer had the proper permissions. --- show_bug.cgi | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'show_bug.cgi') diff --git a/show_bug.cgi b/show_bug.cgi index 1dd1f8820..83baa42b5 100755 --- a/show_bug.cgi +++ b/show_bug.cgi @@ -47,9 +47,9 @@ if (!defined $::FORM{'id'} || $::FORM{'id'} !~ /^\s*\d+\s*$/) { GetVersionTable(); -SendSQL("select short_desc from bugs where bug_id = $::FORM{'id'}"); -my $summary = FetchOneColumn(); -if( $summary ) { +SendSQL("select short_desc, groupset from bugs where bug_id = $::FORM{'id'}"); +my ($summary, $groupset) = FetchSQLData(); +if( $summary && $groupset == 0) { $summary = html_quote($summary); PutHeader("Bug $::FORM{'id'} - $summary", "Bugzilla Bug $::FORM{'id'}", $summary ); }else { -- cgit v1.2.1