[phpBT-dev] Patches for phpBT 1.0

[Ulf E. <ulf...@fa...>]

Benjamin,

Could you please look at the attached patch for inclusion in the 1.0 
branch? It fixes various permission related issues:

  * Bugs item #782962 - How to restrain task assignment only to users at 
admin group
  * Bugs item #1017788 - Managers Cannot Change Bug Details
  * Bugs item #1034495 - New user can set another reporter for bug
  * Bugs item #1060247 - Project Admin cannot change assignments

In v1.0 there are three user groups: Admin, User and Developer. There 
are also three permissions: Admin, EditBug and EditAssignment.

But the code checks for the permissions 'Administrator' and 'Manager' as 
well as the group 'Users'. The patch changes this to check for the 
'Admin' permission, whether the developer is a project admin, and 
whether the user is logged on. Other code changes include giving project 
admins a link to the admin pages and to only allow (project) admins to 
alter the reporter.

/Ulf