Closed Bug 616679 Opened 14 years ago Closed 14 years ago

A User with local editcomponents privs should be able to set the grant and request groups to groups the user belongs to only

Categories

(Bugzilla :: Administration, task)

task
Not set
normal

Tracking

()

RESOLVED FIXED
Bugzilla 4.2

People

(Reporter: LpSolit, Assigned: LpSolit)

References

Details

Attachments

(1 file)

Now that users with local editcomponents privs can administrate flagtypes affecting their products, I think we should restrict the list of available groups for the grant and request groups to those the user belongs to, instead of displaying all groups as we do now. This would avoid disclosing all group names as some of them may only be applicable to some products the user shouldn't know about.
Flags: blocking4.2+
Attached patch patch, v1Splinter Review
Attachment #543810 - Flags: review+
Committing to: bzr+ssh://lpsolit%40gmail.com@bzr.mozilla.org/bugzilla/trunk/ modified editflagtypes.cgi modified template/en/default/admin/flag-type/edit.html.tmpl Committed revision 7848.
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Flags: approval+
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: