Don't even mention bugs that the user does not have permission to see.

diff --git a/showdependencytree.cgi b/showdependencytree.cgi
index f457d67a3e0327446c4bb468d59c8630423c6e73..36694ba6e46198e372ad5b1aa873ac13660490ac 100755 (executable)
--- a/showdependencytree.cgi
+++ b/showdependencytree.cgi
@@ -57,10 +57,11 @@ sub DumpKids {
     if (@list) {
         print "<ul>\n";
         foreach my $kid (@list) {
-            SendSQL("select bug_status, short_desc from bugs where bug_id = $kid and bugs.groupset & $::usergroupset = bugs.groupset");
-            my ($stat, $short_desc) = (FetchSQLData());
-            $stat = "NEW" if !defined $stat;
-            $short_desc = "" if !defined $short_desc;
+            SendSQL("select bug_id, bug_status, short_desc from bugs where bug_id = $kid and bugs.groupset & $::usergroupset = bugs.groupset");
+            my ($bugid, $stat, $short_desc) = (FetchSQLData());
+            if (!defined $bugid) {
+                next;
+            }
             my $opened = ($stat eq "NEW" || $stat eq "ASSIGNED" ||
                           $stat eq "REOPENED");
             print "<li>";