From 25462c2de03087a4eeb6bc9f31e989d4c6376b1c Mon Sep 17 00:00:00 2001
From: "bugreport%peshkin.net"
 <bugreport%peshkin.net@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Sat, 10 Jul 2004 07:23:11 +0000
Subject: [PATCH] Bug 234825: Prevent duplicates.cgi from revealing products
 user doesnt have access to r=justdave a=justdave

git-svn-id: svn://10.0.0.236/branches/BUGZILLA-2_16-BRANCH@158975 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/webtools/bugzilla/duplicates.cgi | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/mozilla/webtools/bugzilla/duplicates.cgi b/mozilla/webtools/bugzilla/duplicates.cgi
index 7172fa6f997..f4b5d9f977a 100755
--- a/mozilla/webtools/bugzilla/duplicates.cgi
+++ b/mozilla/webtools/bugzilla/duplicates.cgi
@@ -205,7 +205,10 @@ $vars->{'openonly'} = $openonly;
 $vars->{'reverse'} = $reverse;
 $vars->{'format'} = $::FORM{'format'};
 $vars->{'product'} = $product;
-$vars->{'products'} = \@::legal_product;
+my @entry_products = grep {(!Param("usebuggroups") 
+                         || !GroupExists($_) 
+                         || UserInGroup($_))} @::legal_product;
+$vars->{'products'} = \@entry_products;
 
 
 my $format = ValidateOutputFormat($::FORM{'format'}, "duplicates", "reports");