Bug 486881: A powerless user can still see a restricted bug when he removes all…

Bugzilla/Bug.pm

@@ -876,6 +876,10 @@ sub update {
     delete $self->{'_old_assigned_to'};
     delete $self->{'_old_qa_contact'};
 
+    # Also flush the visible_bugs cache for this bug as the user's
+    # relationship with this bug may have changed.
+    delete Bugzilla->user->{_visible_bugs_cache}->{$self->id};
+
     return $changes;
 }
 

Bugzilla/User.pm

@@ -588,6 +588,8 @@ sub visible_bugs {
 
     # We only check the visibility of bugs that we haven't
     # checked yet.
+    # Bugzilla::Bug->update automatically removes updated bugs
+    # from the cache to force them to be checked again.
     my $visible_cache = $self->{_visible_bugs_cache} ||= {};
     my @check_ids = grep(!exists $visible_cache->{$_}, @bug_ids);