r1145: Fixed another can_perform() call

diff --git a/docs/changes.txt b/docs/changes.txt
index 35cc4da0c63072c1e527d58b5cfeeef82ec7f4d6..cd6b5fce200ce80b244b5aab0ece0deeeeede536 100644 (file)
--- a/docs/changes.txt
+++ b/docs/changes.txt
@@ -4,6 +4,7 @@
 - Changed array casting instances to is_array() checks, which are better
 - Made some of the email notifications better-worded
 - Fix the correct stylevar for language codes
+- Fixed another can_perform() product-based permissions check [search.php]
 
 1.1.0 Beta 2
 ===============================

diff --git a/search.php b/search.php
index 2b1968f7e0122dd0bae7b92741ebc04f18ac2272..12adfa58ef9766a0c9c13b048a91584620e254ab 100644 (file)
--- a/search.php
+++ b/search.php
@@ -392,13 +392,13 @@ if ($_REQUEST['do'] == 'results')
        {
                $funct->exec_swap_bg($stylevar['alt_color'], '');
                $bug['bgcolor'] = ($bugsys->userinfo['showcolors'] ? $bugsys->datastore['status']["$bug[status]"]['color'] : $funct->bgcolour);
+               $bug['hiddendisplay'] = ((can_perform('canviewhidden', $bug['product']) OR (can_perform('canviewownhidden') AND $bug['userid'] == $bugsys->userinfo['userid'])) ? false : true);
                $bug['product'] = $bugsys->datastore['product']["$bug[product]"]['title'];
                $bug['version'] = $bugsys->datastore['version']["$bug[version]"]['version'];
                $bug['status'] = $bugsys->datastore['status']["$bug[status]"]['status'];
                $bug['resolution'] = $bugsys->datastore['resolution']["$bug[resolution]"]['resolution'];
                $bug['priority'] = $bugsys->datastore['priority']["$bug[priority]"]['priority'];
                $bug['severity'] = $bugsys->datastore['severity']["$bug[severity]"]['severity'];
-               $bug['hiddendisplay'] = ((can_perform('canviewhidden', $bug['productid']) OR (can_perform('canviewownhidden') AND $bug['userid'] == $bugsys->userinfo['userid'])) ? false : true);
                $bug['lastposttime'] = ($bug['hiddendisplay'] ? $bug['hiddenlastposttime'] : $bug['lastposttime']);
                $bug['lastpost'] = ($bug['hiddendisplay'] ? $bug['hiddenlastpostbyname'] : $bug['lastpostbyname']);
                $bug['lastposttime'] = $datef->format($bugsys->options['dateformat'], $bug['lastposttime']);