From: <no...@gi...> - 2012-01-02 01:12:06
|
Branch: refs/heads/master-1.2.x Home: https://github.com/mantisbt/mantisbt Commit: 385e0c905a1dccef87aeb6c748a4298ea902b502 https://github.com/mantisbt/mantisbt/commit/385e0c905a1dccef87aeb6c748a4298ea902b502 Author: Damien Regad <dam...@me...> Date: 2012-01-01 (Sun, 01 Jan 2012) Changed paths: M manage_proj_cat_delete.php M manage_proj_cat_edit_page.php M manage_proj_page.php Log Message: ----------- User must have global access to update global categories The user's global access level must be >= $g_manage_site_threshold to be allowed to add, edit or delete global categories. Prior to this, once a user had been defined as Manager on at least one project, they could freely update global categories. Also prevents such updates through URL manipulation. Fixes #13561 |