From: bugreport%peshkin.net <>
Date: Sat, 10 Jul 2004 14:23:11 +0000 (+0000)
Subject: Bug 234825: Prevent duplicates.cgi from revealing products user doesnt have access to
X-Git-Tag: bugzilla-2.16.6~9
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=155495949d54bcbafd07043ed2b3b39154e57afa;p=thirdparty%2Fbugzilla.git

Bug 234825: Prevent duplicates.cgi from revealing products user doesnt have access to
r=justdave
a=justdave
---

diff --git a/duplicates.cgi b/duplicates.cgi
index 7172fa6f99..f4b5d9f977 100755
--- a/duplicates.cgi
+++ b/duplicates.cgi
@@ -205,7 +205,10 @@ $vars->{'openonly'} = $openonly;
 $vars->{'reverse'} = $reverse;
 $vars->{'format'} = $::FORM{'format'};
 $vars->{'product'} = $product;
-$vars->{'products'} = \@::legal_product;
+my @entry_products = grep {(!Param("usebuggroups") 
+                         || !GroupExists($_) 
+                         || UserInGroup($_))} @::legal_product;
+$vars->{'products'} = \@entry_products;
 
 
 my $format = ValidateOutputFormat($::FORM{'format'}, "duplicates", "reports");