Closed Bug 312317 Opened 20 years ago Closed 20 years ago

Users are permitted to add depedencies on bugs where they should be blocked

Categories

(Bugzilla :: Creating/Changing Bugs, defect, P2)

Product:
Bugzilla
Component:
Creating/Changing Bugs
Version:
2.21
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 141593

People

(Reporter: bugreport, Unassigned)

Details

If a user cannot see or edit bug 1 but can edit bug 1000, they are capable of adding a dependency on bug 1. This causes them to essentially comment on bug 1 and send their identity to all the users on bug 1.
Priority: -- → P2
Summary: Users are permitted to add depedencies on bugs where they should be blocked → Users are permitted to add depedencies on bugs where they should be blocked
Target Milestone: --- → Bugzilla 2.22
OK... bug 141593 now gets to be a priority *** This bug has been marked as a duplicate of 141593 ***
Group: webtools-security
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Target Milestone: Bugzilla 2.22 → ---
You need to log in before you can comment on or make changes to this bug.