View Issue Details

IDProjectCategoryView StatusLast Update
0007977mantisbtbugtrackerpublic2019-12-03 10:44
Reporterbrazo Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status acknowledgedResolutionopen 
Product Version1.1.0a2 
Summary0007977: view_handler_threshold doesn't work for bugnotes reporter (patched)
Description

There is a little issue for view handler threshold.
Limiting the visibility of the handler using view_handler_threshold doesn't work for bugnotes reporter.
In this way, anyone can see the name of the user who reports the (last) bugnotes and understand the name of issue's handler.

I've patched bugnote_view_inc.php with one line of code (near line 120)

before...
echo print_user( $v3_reporter_id );

after
if (access_has_bug_level(config_get('view_handler_threshold'),$f_bug_id))
echo print_user( $v3_reporter_id );

TagsNo tags attached.

Activities

vboctor

vboctor

2007-05-18 02:55

manager   ~0014550

The fix is simple, but logically I am wondering if this would be the right thing to do. I believe there are many options:

  1. If the developer name is hidden, then use "developer" rather than the actual developer name, notes reported by the bug reporter or other users will show the correct user name.

  2. Do what you recommend, i.e. don't show names for reporters of all notes.

Any other ideas are welcome. I am more inclined to option 1.

brazo

brazo

2007-05-18 08:57

reporter   ~0014556

option 1 is good for me

if 'reporter access level' <= view_handler_threshold
display access level
else
display reporter name

simple and logically better.

thanks

syl

syl

2011-03-11 04:46

reporter   ~0028397

V 1.1.8: in bug_update_page view_handler_threshold doesn't work too.
line 221: echo user_get_name( $t_bug->handler_id );
handler is view by all profils.

=>
add
if ( access_has_bug_level( config_get( 'view_handler_threshold' ), $f_bug_id )) {
echo user_get_name( $t_bug->handler_id );
}
(also for bug_update_advanced_page.php line 218)