View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0024696 | mantisbt | authorization | public | 2018-08-24 05:11 | 2018-09-04 01:23 |
Reporter | okido | Assigned To | atrol | ||
Priority | normal | Severity | minor | Reproducibility | have not tried |
Status | closed | Resolution | fixed | ||
Product Version | 2.15.0 | ||||
Target Version | 2.17.0 | Fixed in Version | 2.17.0 | ||
Summary | 0024696: Custom fields can be changed without having update_bug_threshold access rights | ||||
Description | Hi, | ||||
Tags | No tags attached. | ||||
Attached Files | |||||
There is a setting |
|
yes but if i change write access to developer, reporter can't use this field in their report, I just want all user under developer can't update anything in all report. |
|
I have to replace with this new file ? |
|
@okido you could try the change by replacing the file. |
|
I tested it and it solve the problem, but im waiting for you to validate it before I use it |
|
MantisBT: master 4e86afc4 2018-08-26 23:59 Details Diff |
Add update_bug_threshold check for custom field bulk operations Fixes 0024696 |
Affected Issues 0024696 |
|
mod - core/bug_group_action_api.php | Diff File | ||
MantisBT: master ef32cb91 2018-08-28 04:40 Details Diff |
Code and performance enhancements Issue 0024696 |
Affected Issues 0024696 |
|
mod - core/bug_group_action_api.php | Diff File |