Closed Bug 352700 Opened 19 years ago Closed 19 years ago

Unprivilged users are able to view restricted products on query.cgi

Categories

(Bugzilla :: Query/Bug List, defect)

Product:
Bugzilla
Component:
Query/Bug List
Version:
2.22
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED INVALID

People

(Reporter: gregaryh, Unassigned)

Details

We have a number of products in several classifications. Some of these products are open to the public and others are restricted. As a non privilged user on the advanced search page the clasification and product list correctly shows only the open products. However, when I click a classification in the list with a mix of open and closed products, all the products are displayed. This is due to the way the Classification->products method returns the list of products. It simply selects all of them in the classification.
Summary: Classification->products returns all products regardless of user privileges → Unprivilged users are able to view restricted products on query.cgi
Already fixed on tip
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → INVALID
This has been fixed in bug 312933 one year ago. :)
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.