| Title | Bugzilla permissions aren't enforced |
| Status | closed |
| Priority | essential |
| Assigned user | Nick Barnes |
| Organization | Ravenbrook |
| Description | The Bugzilla integration doesn't check Bugzilla permissions (the "groupset" mechanism) when replicating from Perforce to Bugzilla. It should refuse to make changes to Bugzilla bugs which would be refused by the Bugzilla interface if made by the same user. |
| Analysis | bugzilla_bug.update() takes a user; we should look up the groupset and compare it against the groupset of the bug. |
| How found | inspection |
| Evidence | I just know. |
| Introduced in | 0.5.0 |
| Created by | Nick Barnes |
| Created on | 2000-11-29 14:11:16 |
| Last modified by | Gareth Rees |
| Last modified on | 2010-10-06 21:22:56 |
| History | 2000-11-29 NB Created. |