Closed Bug 502682 Opened 16 years ago Closed 16 years ago

CheckIfVotedConfirmed fails to confirm a bug if you don't have the permissions to set status/everconfirmed

Categories

(Bugzilla :: Creating/Changing Bugs, defect)

3.3.4
defect
Not set
normal

Tracking

()

RESOLVED FIXED
Bugzilla 3.2

People

(Reporter: mkanat, Assigned: LpSolit)

References

Details

(Keywords: regression)

Attachments

(1 file)

Because we now use set_status and set_everconfirmed in CheckIfVotedConfirmed, if your vote confirms a bug but you aren't in editbugs, the change will actually fail.
Flags: blocking3.4+
Flags: blocking3.2.4+
Status: NEW → ASSIGNED
Depends on: 500900
Keywords: regression
Attached patch patch, v1Splinter Review
Attachment #387034 - Flags: review?(mkanat)
Attachment #387034 - Flags: review?(mkanat) → review+
Comment on attachment 387034 [details] [diff] [review] patch, v1 Yeah, this is a fine hack for now. Eventually we'll have add_vote, and when a vote confirms a bug, we can call a confirm_by_vote method or something, that sets up something so that set_status and set_everconfirmed can bypass security checks.
Flags: approval3.4+
Flags: approval3.2+
Flags: approval+
tip: Checking in Bugzilla/Bug.pm; /cvsroot/mozilla/webtools/bugzilla/Bugzilla/Bug.pm,v <-- Bug.pm new revision: 1.282; previous revision: 1.281 done 3.3.4: Checking in Bugzilla/Bug.pm; /cvsroot/mozilla/webtools/bugzilla/Bugzilla/Bug.pm,v <-- Bug.pm new revision: 1.276.2.6; previous revision: 1.276.2.5 done 3.2.3: Checking in Bugzilla/Bug.pm; /cvsroot/mozilla/webtools/bugzilla/Bugzilla/Bug.pm,v <-- Bug.pm new revision: 1.241.2.20; previous revision: 1.241.2.19 done
Status: ASSIGNED → RESOLVED
Closed: 16 years ago
Flags: testcase?
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: