Bug 476678 - Rich clients unable to update bugs need security token included in...

 patch by ghendricks@novell.com r=LpSolit a=LpSolit

diff --git a/importxml.pl b/importxml.pl
index 08bf06c93cc5aa27b21850b3f3373a8c771d66d2..a141d5e169f48e60abf07ef21fc4d5da654a4d25 100755 (executable)
--- a/importxml.pl
+++ b/importxml.pl
@@ -470,6 +470,11 @@ sub process_bug {
    # append it to the log, which will go into the comments when we are done.
     foreach my $bugchild ( $bug->children() ) {
         Debug( "Parsing field: " . $bugchild->name, DEBUG_LEVEL );
+
+        # Skip the token if one is included. We don't want it included in
+        # the comments, and it is not used by the importer.
+        next if $bugchild->name eq 'token';
+
         if ( defined $all_fields{ $bugchild->name } ) {
             my @values = $bug->children_text($bugchild->name);
             if (scalar @values > 1) {

diff --git a/show_bug.cgi b/show_bug.cgi
index 0578733beeaeffe1a4988f89794cdfaf01e28426..746167eefd783968bebf54863f79b2ef19e442f1 100755 (executable)
--- a/show_bug.cgi
+++ b/show_bug.cgi
@@ -117,7 +117,7 @@ $vars->{'bug_list'} = \@bug_list;
 # on the exclusion list. This is so you can say e.g. "Everything except 
 # attachments" without listing almost all the fields.
 my @fieldlist = (Bugzilla::Bug->fields, 'group', 'long_desc', 
-                 'attachment', 'attachmentdata');
+                 'attachment', 'attachmentdata', 'token');
 my %displayfields;
 
 if ($cgi->param("field")) {

diff --git a/template/en/default/bug/show.xml.tmpl b/template/en/default/bug/show.xml.tmpl
index f6f3617a0b4bf7401d0d9d0914c56bc589402aa1..1114d9cd7a9e60afafbff99173c7e074f374225f 100644 (file)
--- a/template/en/default/bug/show.xml.tmpl
+++ b/template/en/default/bug/show.xml.tmpl
@@ -48,6 +48,11 @@
         [% END %]
       [% END %]
 
+      [%# This is here so automated clients can still use process_bug.cgi %]
+      [% IF displayfields.token && user.id %]
+          <token>[% issue_hash_token([bug.id, bug.delta_ts]) FILTER xml %]</token>
+      [% END %]
+
       [%# Now handle 'special' fields #%]
       [% IF displayfields.group %]
         [% FOREACH g = bug.groups %]