aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2005-03-30 18:16:21 +0000
committerlpsolit%gmail.com <>2005-03-30 18:16:21 +0000
commit9797547f955dde63dff188a625834eb338f319fa (patch)
tree29b437c72f84aa1954512c78648dd01ed1528f56 /summarize_time.cgi
parentBug 276543: createaccount.cgi should not be displayed if account creation is ... (diff)
downloadbugzilla-9797547f955dde63dff188a625834eb338f319fa.tar.gz
bugzilla-9797547f955dde63dff188a625834eb338f319fa.tar.bz2
bugzilla-9797547f955dde63dff188a625834eb338f319fa.zip
Bug 286003: Direct access to summarize-time.cgi when time tracking is off generates an error - Patch by Shane H. W. Travis <shane.h.w.travis@gmail.com> r=jouni a=justdave
Diffstat (limited to 'summarize_time.cgi')
-rwxr-xr-xsummarize_time.cgi6
1 files changed, 4 insertions, 2 deletions
diff --git a/summarize_time.cgi b/summarize_time.cgi
index 6ea31fceb..077678c2e 100755
--- a/summarize_time.cgi
+++ b/summarize_time.cgi
@@ -360,8 +360,10 @@ my $cgi = Bugzilla->cgi;
Bugzilla->switch_to_shadow_db();
-ThrowUserError("timetracking_access_denied") unless
- UserInGroup(Param("timetrackinggroup"));
+UserInGroup(Param("timetrackinggroup"))
+ || ThrowUserError("auth_failure", {group => "time-tracking",
+ action => "access",
+ object => "timetracking_summaries"});
my @ids = split(",", $cgi->param('id'));
map { ValidateBugID($_) } @ids;