From: wurblzap%gmail.com <>
Date: Fri, 5 Oct 2007 21:50:12 +0000 (+0000)
Subject: Bug 349567 – strict_isolation in post_bug should also check can_see_product.
X-Git-Tag: bugzilla-3.1.3~520
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=27eb4b5c77ef844c49b14187871a000890c2b17e;p=thirdparty%2Fbugzilla.git

Bug 349567 – strict_isolation in post_bug should also check can_see_product.
Patch by Marc Schumann <wurblzap@gmail.com>;
r=LpSolit; a=LpSolit
---

diff --git a/Bugzilla/Bug.pm b/Bugzilla/Bug.pm
index 067dc484e5..1e1dee712a 100755
--- a/Bugzilla/Bug.pm
+++ b/Bugzilla/Bug.pm
@@ -1175,7 +1175,8 @@ sub _check_strict_isolation {
     my @blocked_users;
     foreach my $pid (keys %unique_users) {
         my $related_user = Bugzilla::User->new($pid);
-        if (!$related_user->can_edit_product($product->id)) {
+        if (!$related_user->can_edit_product($product->id) ||
+            !$related_user->can_see_product($product->id)) {
             push (@blocked_users, $related_user->login);
         }
     }