← Back to branch summary

~ubuntu-branches/ubuntu/natty/mantis/natty-security

« back to all changes in this revision

Viewing changes to api/soap/mc_issue_api.php

  • Committer: Package Import Robot
  • Author(s): Jamie Strandboge
  • Date: 2012-06-29 07:28:16 UTC
  • mfrom: (7.1.11 squeeze)
  • Revision ID: package-import@ubuntu.com-20120629072816-1rwdgapquo4k5uyg
Tags: 1.1.8+dfsg-10squeeze2build0.11.04.1
fake sync from Debian

Show diffs side-by-side

added added

removed removed

Lines of Context:
api/soap/mc_issue_api.php
729
729
                        return new soap_fault( 'Client', '', 'Access Denied' );
730
730
                }
731
731
 
 
732
                if ( !access_has_bug_level( config_get( 'delete_bug_threshold' ), $p_issue_id, $t_user_id ) ) {
 
733
                        return mci_soap_fault_access_denied( $t_user_id );
 
734
                }
 
735
 
732
736
                return bug_delete( $p_issue_id );
733
737
        }
734
738
 
806
810
                        return new soap_fault( 'Client', '', 'Access Denied' );
807
811
                }
808
812
 
 
813
                $t_reporter_id = bugnote_get_field( $p_issue_note_id, 'reporter_id' );
 
814
 
 
815
                // mirrors check from bugnote_delete.php
 
816
                if ( ( $t_user_id != $t_reporter_id ) || ( OFF == config_get( 'bugnote_allow_user_edit_delete' ) ) ) {
 
817
                        if ( !access_has_bugnote_level( config_get( 'delete_bugnote_threshold' ), $p_issue_note_id ) ) {
 
818
                                return mci_soap_fault_access_denied( $t_user_id );
 
819
                        }
 
820
                }
 
821
 
809
822
                return bugnote_delete( $p_issue_note_id );
810
823
        }
811
824