From 144ac6c017f6d2e4a445abb6c5c54243f7ba8155 Mon Sep 17 00:00:00 2001
From: Robert Sesek <rsesek@bluestatic.org>
Date: Sun, 20 Aug 2006 20:54:38 +0000
Subject: [PATCH] r1099: Adding productid to the can_perform() calls for
 canviewownhidden

---
 editcomment.php | 2 +-
 editreport.php  | 2 +-
 showhistory.php | 2 +-
 showreport.php  | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/editcomment.php b/editcomment.php
index c2b676c..4c44ab8 100644
--- a/editcomment.php
+++ b/editcomment.php
@@ -42,7 +42,7 @@ $comment =& $commentapi->objdata;
 
 $bug = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = $comment[bugid]");
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
 	$message->error_permissison();
 }
diff --git a/editreport.php b/editreport.php
index e2ce90c..7a7625d 100644
--- a/editreport.php
+++ b/editreport.php
@@ -47,7 +47,7 @@ if (!$bug)
 	$message->error($lang->getlex('error_invalid_id'));
 }
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
 	$message->error_permission();
 }
diff --git a/showhistory.php b/showhistory.php
index cb4e901..1827f42 100644
--- a/showhistory.php
+++ b/showhistory.php
@@ -37,7 +37,7 @@ if (!$bug)
 	$message->error($lang->getlex('error_invalid_id'));
 }
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
 	$message->error_permission();
 }
diff --git a/showreport.php b/showreport.php
index 1837ad6..0e0afeb 100644
--- a/showreport.php
+++ b/showreport.php
@@ -84,7 +84,7 @@ if (!is_array($bug))
 	$message->error($lang->getlex('error_invalid_id'));
 }
 
-if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden'))) AND can_perform('canviewbugs', $bug['product']))
+if (!(($bug['hidden'] AND can_perform('canviewhidden', $bug['product'])) OR ($bug['hidden'] AND $bugsys->userinfo['userid'] == $bug['userid'] AND can_perform('canviewownhidden', $bug['productid']))) AND can_perform('canviewbugs', $bug['product']))
 {
 	$message->error_permission();
 }
-- 
2.22.5