Bug 266579 : Users without privs can confirm bugs by assigning to themselves first, without having canconfirm privs

Patch by LpSolit@gmail.com    r=myk    a=justdave


git-svn-id: svn://10.0.0.236/trunk@168095 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/webtools/bugzilla/post_bug.cgi

@@ -130,7 +130,7 @@ my $sql_product = SqlQuote($::FORM{'product'});
 my $sql_component = SqlQuote($::FORM{'component'});
 
 # Default assignee is the component owner.
-if ($::FORM{'assigned_to'} eq "") {
+if (!UserInGroup("editbugs") || $::FORM{'assigned_to'} eq "") {
     SendSQL("SELECT initialowner FROM components " .
             "WHERE id = $component_id");
     $::FORM{'assigned_to'} = FetchOneColumn();