r1099: Adding productid to the can_perform() calls for canviewownhidden

diff --git a/editcomment.php b/editcomment.php
index c2b676cad1641d2b2154e91d3906e88583aa6175..4c44ab89f9cd0bd2910f2b5e6cafeaa940a1b5bf 100644 (file)
--- a/editcomment.php
+++ b/editcomment.php
@@ -42,7 +42,7 @@ $comment =& $commentapi->objdata;
 
 $bug = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = $comment[bugid]");
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
        $message->error_permissison();
 }

diff --git a/editreport.php b/editreport.php
index e2ce90ce335a9686591d0561c64c7388605de361..7a7625da5d2b918bb78e9fcfa64221d956216840 100644 (file)
--- a/editreport.php
+++ b/editreport.php
@@ -47,7 +47,7 @@ if (!$bug)
        $message->error($lang->getlex('error_invalid_id'));
 }
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
        $message->error_permission();
 }

diff --git a/showhistory.php b/showhistory.php
index cb4e901c1f123e5ba799f97e56a6860447083869..1827f4277b9f385d44d1e0d372708b17fae092de 100644 (file)
--- a/showhistory.php
+++ b/showhistory.php
@@ -37,7 +37,7 @@ if (!$bug)
        $message->error($lang->getlex('error_invalid_id'));
 }
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
        $message->error_permission();
 }

diff --git a/showreport.php b/showreport.php
index 1837ad675f5fa7a9b3c0228f9b75f698c8ecf596..0e0afeb353b092874396eb234db68b1b3d5183d6 100644 (file)
--- a/showreport.php
+++ b/showreport.php
@@ -84,7 +84,7 @@ if (!is_array($bug))
        $message->error($lang->getlex('error_invalid_id'));
 }
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
        $message->error_permission();
 }