Commit 386cc09b authored by bugreport%peshkin.net's avatar bugreport%peshkin.net

Bug 234825: Keep duplicates.cgi from revealing products user doesnt have access to

r,a=justdave
parent a987df21
......@@ -266,7 +266,8 @@ $vars->{'openonly'} = $openonly;
$vars->{'reverse'} = $reverse;
$vars->{'format'} = $cgi->param('format');
$vars->{'query_products'} = \@query_products;
$vars->{'products'} = \@::legal_product;
my @selectable_products = GetSelectableProducts();
$vars->{'products'} = \@selectable_products;
my $format = GetFormat("reports/duplicates", scalar($cgi->param('format')),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment