From: lpsolit%gmail.com <> Date: Tue, 7 Jul 2009 11:11:24 +0000 (+0000) Subject: Bug 502682: CheckIfVotedConfirmed fails to confirm a bug if you don't have the permis... X-Git-Tag: bugzilla-3.2.4~4 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d3ba2d4611394a107b0c84f04ec2389a11832059;p=thirdparty%2Fbugzilla.git Bug 502682: CheckIfVotedConfirmed fails to confirm a bug if you don't have the permissions to set status/everconfirmed - Patch by Frédéric Buclin r/a=mkanat --- diff --git a/Bugzilla/Bug.pm b/Bugzilla/Bug.pm index 3ede4732ce..b3ddd26342 100644 --- a/Bugzilla/Bug.pm +++ b/Bugzilla/Bug.pm @@ -3160,11 +3160,17 @@ sub CheckIfVotedConfirmed { } ThrowCodeError('no_open_bug_status') unless $new_status; - $bug->set_status($new_status); + # We cannot call $bug->set_status() here, because a user without + # canconfirm privs should still be able to confirm a bug by + # popular vote. We already know the new status is valid, so it's safe. + $bug->{bug_status} = $new_status; + $bug->{everconfirmed} = 1; + delete $bug->{'status'}; # Contains the status object. } else { # If the bug is in a closed state, only set everconfirmed to 1. - $bug->_set_everconfirmed(1); + # Do not call $bug->_set_everconfirmed(), for the same reason as above. + $bug->{everconfirmed} = 1; } $bug->update();