View Issue Details

IDProjectCategoryView StatusLast Update
0023504mantisbtfilterspublic2018-03-31 19:58
Reportercproensa Assigned Tocproensa  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version2.8.0 
Target Version2.13.0Fixed in Version2.13.0 
Summary0023504: Filter "monitored by" does not account for configuration "show_monitor_list_threshold"
Description

An unprivileged user who can't see monitoring users can get results by filtering for issued monitored by other users

TagsNo tags attached.

Activities

There are no notes attached to this issue.

Related Changesets

MantisBT: master 8a042864

2017-10-20 00:19

cproensa

Committer: dregad


Details Diff
Use view monitoring access in filter query

Match issues monitored by other users only when the user have access to
view them.

Fixes: 0023504
Affected Issues
0023504
mod - core/classes/BugFilterQuery.class.php Diff File