From: bbaetz%student.usyd.edu.au <> Date: Wed, 22 May 2002 06:38:17 +0000 (+0000) Subject: Bug 144565 - describecomponents.cgi shows wrong components when user has X-Git-Tag: bugzilla-2.16rc2~37 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4b48d59d6e1939ed1f09d73f035a0661f98af956;p=thirdparty%2Fbugzilla.git Bug 144565 - describecomponents.cgi shows wrong components when user has access to only one product Bug 145113 - describecomponents doesn't call quietly_check_login() r=justdave, gerv --- diff --git a/describecomponents.cgi b/describecomponents.cgi index 8d2c219f4b..8ae98260b3 100755 --- a/describecomponents.cgi +++ b/describecomponents.cgi @@ -36,13 +36,15 @@ require "CGI.pl"; ConnectToDatabase(); GetVersionTable(); +quietly_check_login(); + if (!defined $::FORM{'product'}) { # Reference to a subset of %::proddesc, which the user is allowed to see my %products; if (Param("usebuggroups")) { # OK, now only add products the user can see - confirm_login(); + confirm_login() unless $::userid; foreach my $p (@::legal_product) { if (!GroupExists($p) || UserInGroup($p)) { $products{$p} = $::proddesc{$p}; @@ -72,7 +74,7 @@ if (!defined $::FORM{'product'}) { exit; } - $::FORM{'product'} = (keys %::proddesc)[0]; + $::FORM{'product'} = (keys %products)[0]; } my $product = $::FORM{'product'}; @@ -88,8 +90,8 @@ grep($product eq $_ , @::legal_product) && exit; # Make sure the user is authorized to access this product. -if (Param("usebuggroups") && GroupExists($product) && !$::userid) { - confirm_login(); +if (Param("usebuggroups") && GroupExists($product)) { + confirm_login() unless $::userid; UserInGroup($product) || DisplayError("You are not authorized to access that product.") && exit;