Title | Changes by disabled Bugzilla users may be replicated |
Status | closed |
Priority | essential |
Assigned user | Nick Barnes |
Organization | Ravenbrook |
Description | Bugzilla has a mechanism for disabling users. We don't check this as part of checking user permissions. We should. |
Analysis | Need to get 'disabledtext' column from profiles and refuse to update if it's non-empty. We recommend that the special bugzilla user is disabled, so this test needs to be restricted. |
How found | inspection |
Evidence | I just know. |
Observed in | 0.4.0 |
Introduced in | 0.4.0 |
Created by | Nick Barnes |
Created on | 2000-12-05 14:06:38 |
Last modified by | Gareth Rees |
Last modified on | 2010-10-06 21:30:15 |
History | 2000-12-05 NB Created. 2000-12-11 RB Set priority to "essential". |
Change | Effect | Date | User | Description |
---|---|---|---|---|
23707 | closed | 2001-11-01 13:30:15 | Nick Barnes | Before changing a Bugzilla bug on behalf of a user, check that the user is not disabled in Bugzilla. |