511871 - Search & Product not selected: Returns all bugs of other not listed products

Status: RESOLVED INVALID

(Bugzilla :: Query/Bug List, defect)

Description

[michael Freiji]

User-Agent:       Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET CLR 3.0.30618; InfoPath.2)
Build Identifier: 3.2.3

if a user is only permitted to view "Product A" and "Product B" then if he enters the search page, the product list displays only "Product A" & "Product B" (which is right). By default, no Products are selected, so if he clicks "Search" all bugs of all products (not only A & B) will be displayed (which is wrong). the right bevahior should be: if he does not select any product then only bugs of the listed producted should be displayed (in this case Product A & B).

Reproducible: Always

Comment 1

[Frédéric Buclin]

I cannot reproduce your issue with Bugzilla 3.2.4, nor with Bugzilla 3.5. Either you user has a role with bugs being in products he cannot see (such as being in the CC list, or is the QA contact), or you didn't set group control settings correctly for some products (which must have Mandatory/Mandatory set; all other combinations don't prevent to see the product).

Comment 2

[michael Freiji]

maybe there is something wrong in my understanding and most probably i have some problems.
What i need is do the support for many customers and at the same time manage internal bugs in the support department, the follwing are some notes:
1-- each customer can add/edit/see only his bugs
2-- our support department can reply to all these bugs (all cusotmers)
3-- our support department needs to add/edit/see internal bugs (of course, no customer can see/edit any of these internal bugs)

i was thinking of adding a product for the support department and a product for each customer. can you please help me in putting the permissions at the groups and products levels.

Thank you so much in advance