View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0021913 | mantisbt | tagging | public | 2016-11-13 17:13 | 2017-10-08 23:52 |
Reporter | cproensa | Assigned To | cproensa | ||
Priority | normal | Severity | minor | Reproducibility | have not tried |
Status | closed | Resolution | fixed | ||
Product Version | 1.3.3 | ||||
Target Version | 2.7.0 | Fixed in Version | 2.7.0 | ||
Summary | 0021913: Unprivileged user can see related tags from private issues | ||||
Description | The selection of related tags is comparing incorrectly for access level: <pre> The clause | ||||
Tags | No tags attached. | ||||
MantisBT: master 8ab8e125 2017-08-14 13:46 Committer: dregad Details Diff |
Fix query for related tags Refactor the related tags function to use a filter search for the tag, leaving the rd work for access and visibility checks to the filter api. Previous query was not correct as it was comparing project access level with bug view state. Also, it didn't account for view tags permissions for each project. Fixes: 0021913 |
Affected Issues 0021913 |
|
mod - core/tag_api.php | Diff File |