MantisBT: master-2.24 65567e0d

Author Committer Branch Timestamp Parent
dregad dregad master-2.24 2020-12-28 18:41:32 master-2.24 ab37fe37
Affected Issues  0021393: When disable "Update an issue", then "Assign to" become access denied
 0022093: Reporter can´t change status of a bug
 0027806: Impossible to edit issues with PHP8

Properly check access level when updating issues

Commit bf1f02f71a85bd4e05cd2a627b3c25e79f96d5a0 (issues 0021393, 0022093)
introduced a bug in the access level check, as it passed the threshold
as a string to access_ensure_bug_level() instead of its actual value.

This seemed to work in PHP < 8.0, because string comparisons behaved
differently [1], but in reality there was no actual access check, as
the strings were evaluated to 0 (ANYBODY).

Adding the missing config_get() call to fix the access level check.

Fixes 0027806

mod - bug_update.php Diff File