Bug 234825: Prevent duplicates.cgi from revealing products user doesnt have access to

r=justdave
a=justdave


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-2_16-BRANCH@158975 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/webtools/bugzilla/duplicates.cgi

@@ -205,7 +205,10 @@ $vars->{'openonly'} = $openonly;
 $vars->{'reverse'} = $reverse;
 $vars->{'format'} = $::FORM{'format'};
 $vars->{'product'} = $product;
-$vars->{'products'} = \@::legal_product;
+my @entry_products = grep {(!Param("usebuggroups") 
+                         || !GroupExists($_) 
+                         || UserInGroup($_))} @::legal_product;
+$vars->{'products'} = \@entry_products;
 
 
 my $format = ValidateOutputFormat($::FORM{'format'}, "duplicates", "reports");