Fix Move bugs from projects with access < report_bug_threshold

The access check in bug_actiongroup.php was not correct. It should verify the user's report_bug_threshold in the target project, not the current project. Fixes #13748
mantisbt · Jan 9, 2012 · 0da3f7a · 0da3f7a
1 parent 0dd1ae0
commit 0da3f7a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/bug_actiongroup.php b/bug_actiongroup.php
@@ -136,8 +136,8 @@
 
 	case 'MOVE':
 		$f_project_id = gpc_get_int( 'project_id' );
-		if ( access_has_bug_level( config_get( 'move_bug_threshold' ), $t_bug_id ) &&
-		     access_has_project_level( config_get( 'report_bug_threshold' ), $f_project_id ) ) {
+		if( access_has_bug_level( config_get( 'move_bug_threshold' ), $t_bug_id ) &&
+		    access_has_project_level( config_get( 'report_bug_threshold', null, null, $f_project_id ), $f_project_id ) ) {
 			/** @todo we need to issue a helper_call_custom_function( 'issue_update_validate', array( $t_bug_id, $t_bug_data, $f_bugnote_text ) ); */
 			bug_move( $t_bug_id, $f_project_id );
 			helper_call_custom_function( 'issue_update_notify', array( $t_bug_id ) );