Commit 27eb4b5c authored by wurblzap%gmail.com's avatar wurblzap%gmail.com

Bug 349567 – strict_isolation in post_bug should also check can_see_product.

Patch by Marc Schumann <wurblzap@gmail.com>; r=LpSolit; a=LpSolit
parent 34b3230e
......@@ -1175,7 +1175,8 @@ sub _check_strict_isolation {
my @blocked_users;
foreach my $pid (keys %unique_users) {
my $related_user = Bugzilla::User->new($pid);
if (!$related_user->can_edit_product($product->id)) {
if (!$related_user->can_edit_product($product->id) ||
!$related_user->can_see_product($product->id)) {
push (@blocked_users, $related_user->login);
}
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment