Bug 179491 Searchs of attachments containing a string do not enforce attchment privacy

r=bbaetz
a=justdave

diff --git a/Bugzilla/Search.pm b/Bugzilla/Search.pm
index d7e3818d04c10ce6c1e272c1bfb846f187866d75..11dbb57dab22501dc317e4cf2f60c632cda4c834 100644 (file)
--- a/Bugzilla/Search.pm
+++ b/Bugzilla/Search.pm
@@ -424,6 +424,9 @@ sub init {
          "^attachments\..*," => sub {
              my $table = "attachments_$chartid";
              push(@supptables, "attachments $table");
+             if (Param("insidergroup") && !&::UserInGroup(Param("insidergroup"))) {
+                 push(@wherepart, "$table.isprivate = 0") ;
+             }
              push(@wherepart, "bugs.bug_id = $table.bug_id");
              $f =~ m/^attachments\.(.*)$/;
              my $field = $1;