User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:18.104.22.168) Gecko/2009011913 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Build Identifier: 3.2.2 Users that are part of a group that does not have Canedit permission still see an "Additional comments" text area and a "Commit" button. It is only after filling out the field and submitting the change that they get a "You are not permitted to edit bugs in product <product name>." error. The text area and button should not be visible to members of a group like this. Reproducible: Always
OS: Windows XP → All
Hardware: x86 → All
Version: unspecified → 3.2.2
Confirmed using Bugzilla 3.3.4. Would be fine to have it fixed on the 3.2 branch, if it's not too invasive.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Target Milestone: --- → Bugzilla 3.2
Bugzilla 3.2 is restricted to security bugs only. Moreover, this bug is either assigned to nobody or got no traction for several months now. Rather than retargetting it at each new release, I'm clearing the target milestone and the bug will be retargetted to some sensible release when someone starts fixing this bug for real (Bugzilla 3.8 more likely).
Target Milestone: Bugzilla 3.2 → ---
You need to log in before you can comment on or make changes to this bug.