diff --git a/mozilla/webtools/testopia/Bugzilla/Testopia/Build.pm b/mozilla/webtools/testopia/Bugzilla/Testopia/Build.pm
index c120f8101d8..ee189526d40 100644
--- a/mozilla/webtools/testopia/Bugzilla/Testopia/Build.pm
+++ b/mozilla/webtools/testopia/Bugzilla/Testopia/Build.pm
@@ -228,6 +228,25 @@ sub description     { return $_[0]->{'description'};}
 sub milestone       { return $_[0]->{'milestone'};}
 sub isactive        { return $_[0]->{'isactive'};}
 
+sub bugs {
+    my $self = shift;
+    my $dbh = Bugzilla->dbh;
+    return $self->{'bugs'} if exists $self->{'bugs'};
+    my $ref = $dbh->selectcol_arrayref(
+          "SELECT DISTINCT bug_id
+             FROM test_case_bugs b
+             JOIN test_case_runs r ON r.case_run_id = b.case_run_id
+            WHERE r.build_id = ?", 
+           undef, $self->id);
+    my @bugs;
+    foreach my $id (@{$ref}){
+        push @bugs, Bugzilla::Bug->new($id, Bugzilla->user->id);
+    }
+    $self->{'bugs'} = \@bugs if @bugs;
+    $self->{'bug_list'} = join(',', @$ref);
+    return $self->{'bugs'};
+}
+
 sub product {
     my ($self) = @_;
     
diff --git a/mozilla/webtools/testopia/Bugzilla/Testopia/Product.pm b/mozilla/webtools/testopia/Bugzilla/Testopia/Product.pm
index 23c702b1e8f..befd519a9d3 100644
--- a/mozilla/webtools/testopia/Bugzilla/Testopia/Product.pm
+++ b/mozilla/webtools/testopia/Bugzilla/Testopia/Product.pm
@@ -281,6 +281,14 @@ sub type {
     return $self->{'type'};
 }
 
+sub canview {
+    my $self = shift;
+    my ($user) = @_;
+    $user ||= Bugzilla->user;
+    return 1 if $user->can_see_product($self->name);
+    return 0;
+}
+
 sub canedit {
     my $self = shift;
     my ($user) = @_;
diff --git a/mozilla/webtools/testopia/Bugzilla/Testopia/TestCase.pm b/mozilla/webtools/testopia/Bugzilla/Testopia/TestCase.pm
index aac716b0142..4d2dd19709b 100644
--- a/mozilla/webtools/testopia/Bugzilla/Testopia/TestCase.pm
+++ b/mozilla/webtools/testopia/Bugzilla/Testopia/TestCase.pm
@@ -821,17 +821,16 @@ Attaches the specified bug to this test case
 
 sub attach_bug {
     my $self = shift;
-    my ($bugids, $case_id) = @_;
+    my ($bugids, $caserun_id) = @_;
     my $dbh = Bugzilla->dbh;
     
-    $case_id ||= $self->{'case_id'};
     $bugids = $self->_check_bugs($bugids, "ATTACH");
     
     $dbh->bz_lock_tables('test_case_bugs WRITE');
     
     foreach my $bug (@$bugids){
         $dbh->do("INSERT INTO test_case_bugs (bug_id, case_run_id, case_id)
-                  VALUES(?,?,?)", undef, ($bug, undef, $self->id));
+                  VALUES(?,?,?)", undef, ($bug, $caserun_id, $self->id));
     }
 
     $dbh->bz_unlock_tables();
diff --git a/mozilla/webtools/testopia/extensions/testopia/code/post_bug-after_creation.pl b/mozilla/webtools/testopia/extensions/testopia/code/post_bug-after_creation.pl
index 9d80df91424..19fce47fb3e 100644
--- a/mozilla/webtools/testopia/extensions/testopia/code/post_bug-after_creation.pl
+++ b/mozilla/webtools/testopia/extensions/testopia/code/post_bug-after_creation.pl
@@ -8,6 +8,7 @@ my $cgi = Bugzilla->cgi;
 
 if ($cgi->param('case_id')) {
     my $case = Bugzilla::Testopia::TestCase->new($cgi->param('case_id'));
+    ThrowUserError("testopia-read-only", {'object' => $case}) unless $case->canedit;
     
     $case->attach_bug($vars->{'id'});
 
@@ -15,6 +16,7 @@ if ($cgi->param('case_id')) {
 }
 if ($cgi->param('caserun_id')) {
     my $caserun = Bugzilla::Testopia::TestCaseRun->new($cgi->param('caserun_id'));
+    ThrowUserError("testopia-read-only", {'object' => $caserun}) unless $caserun->canedit;
     
     $caserun->attach_bug($vars->{'id'});
 
diff --git a/mozilla/webtools/testopia/template/en/default/hook/global/common-links.html.tmpl/links/testopia.html.tmpl b/mozilla/webtools/testopia/template/en/default/hook/global/common-links.html.tmpl/links/testopia.html.tmpl
index da58c522e42..88d0b57186b 100644
--- a/mozilla/webtools/testopia/template/en/default/hook/global/common-links.html.tmpl/links/testopia.html.tmpl
+++ b/mozilla/webtools/testopia/template/en/default/hook/global/common-links.html.tmpl/links/testopia.html.tmpl
@@ -25,11 +25,11 @@
 [% END %]
 <div class="label">Testopia: </div>
 <ul class="links testopia_links">
-[% IF user.in_group('Testers') %]
   <li><a href="tr_show_product.cgi">Product Dashboard</a></li>
+[% IF user.in_group('Testers') %]
   <li><span class="separator">| </span><a href="tr_new_plan.cgi">New Plan</a></li>
 [% END %]
-  <li>[% UNLESS user.in_group('Testers') %]<span class="separator">| [% END %]</span><a href="tr_new_case.cgi?plan_id=[% plan_id FILTER none %]">New Case</a></li>
+  <li><span class="separator">| </span><a href="tr_new_case.cgi?plan_id=[% plan_id FILTER none %]">New Case</a></li>
   <li><span class="separator">| </span><a href="tr_new_run.cgi?plan_id=[% plan_id FILTER none %]&case_status_id=2">New Run</a></li>
   <li><span class="separator">| </span><a href="tr_query.cgi">Search</a></li>
 
diff --git a/mozilla/webtools/testopia/template/en/default/testopia/product/show.html.tmpl b/mozilla/webtools/testopia/template/en/default/testopia/product/show.html.tmpl
index 9f3c1b8cbcd..9582ba83fa8 100644
--- a/mozilla/webtools/testopia/template/en/default/testopia/product/show.html.tmpl
+++ b/mozilla/webtools/testopia/template/en/default/testopia/product/show.html.tmpl
@@ -109,7 +109,7 @@ Ext.onReady(function(){
         },{
             text: 'New Environment',
             handler: function(){
-                window.location = 'tr_new_environment.cgi?product_id=' + Ext.getCmp('products-pane').getSelectionModel().getSelectedNode().id;
+                window.location = 'tr_new_environment.cgi?product_id=' + Ext.getCmp('products_pane').getSelectionModel().getSelectedNode().id;
             }
         }]
     });
@@ -130,14 +130,12 @@ Ext.onReady(function(){
             handler: function(){
                 SearchPopup('run');
             }
-        }
-//       ,{
-//            text: 'Test Results Search',
-//            handler: function(){
-//                SearchPopup('case_run');
-//            }
-//        }
-        ]
+        },{
+            text: 'Test Results Search',
+            handler: function(){
+                SearchPopup('case_run');
+            }
+        }]
     });
 
     var report_menu = new Ext.menu.Menu({
@@ -198,7 +196,7 @@ Ext.onReady(function(){
             title: 'Products',
             width: 212,
             maxsize: 400,
-            id: 'products-pane',
+            id: 'products_pane',
             xtype: 'treepanel',
             loader: new Ext.tree.TreeLoader({
               dataUrl:'tr_quicksearch.cgi',
@@ -292,11 +290,11 @@ Ext.onReady(function(){
         }]
     });
   [% IF product %]
-    Ext.getCmp('products-pane').getLoader().on('load', function(l,n,r){
+    Ext.getCmp('products_pane').getLoader().on('load', function(l,n,r){
         if (n.isExpanded() && n.id != 'classes'){
             return;
         }
-        var tree = Ext.getCmp('products-pane');
+        var tree = Ext.getCmp('products_pane');
         var cnode = tree.getNodeById('c[% product.classification_id FILTER none %]');
         cnode.expand(1,true,function(n){
             tree.getNodeById('[% product.id FILTER none %]').select();
diff --git a/mozilla/webtools/testopia/template/en/default/testopia/reports/completion.html.tmpl b/mozilla/webtools/testopia/template/en/default/testopia/reports/completion.html.tmpl
index 0345f18cded..24ebd1703b1 100644
--- a/mozilla/webtools/testopia/template/en/default/testopia/reports/completion.html.tmpl
+++ b/mozilla/webtools/testopia/template/en/default/testopia/reports/completion.html.tmpl
@@ -71,12 +71,12 @@
     <tr>
       <td>
         <table style="height:200px; cell-padding: 3px; margin-right: 10px; border: 1px solid black">
-          <tr><th class="report_header">Total:</th><td colspan="2" align="center"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]" target="_blank">[% total FILTER none %]</a></td></tr>
-          <tr><th class="report_header">Completed:</th><td class="complete_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&case_run_status=PASSED&case_run_status=FAILED&case_run_status=BLOCKED" target="_blank">[% completed FILTER none %]</a></td><td class="complete_cell">[% percent_completed || 0 FILTER none %]%</td></tr>
-          <tr><th class="report_header">IDLE:</th><td class="idle_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&case_run_status=IDLE" target="_blank">[% idle FILTER none %]</a></td><td class="idle_cell">[% percent_idle  || 0 FILTER none %]%</td></tr>
-          <tr><th class="report_header">PASSED:</th><td class="passed_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&case_run_status=PASSED" target="_blank">[% passed FILTER none %]</a></td><td class="passed_cell">[% percent_passed  || 0 FILTER none %]%</td></tr>
-          <tr><th class="report_header">FAILED:</th><td class="failed_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&case_run_status=FAILED" target="_blank">[% failed FILTER none %]</a></td><td class="failed_cell">[% percent_failed  || 0 FILTER none %]%</td></tr>
-          <tr><th class="report_header">BLOCKED:</th><td class="blocked_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&case_run_status=BLOCKED" target="_blank">[% blocked FILTER none %]</a></td><td class="blocked_cell">[% percent_blocked  || 0 FILTER none %]%</td></tr>
+          <tr><th class="report_header">Total:</th><td colspan="2" align="center"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&build_id=[% builds FILTER url_quote %]" target="_blank">[% total FILTER none %]</a></td></tr>
+          <tr><th class="report_header">Completed:</th><td class="complete_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&build_id=[% builds FILTER url_quote %]&case_run_status=PASSED&case_run_status=FAILED&case_run_status=BLOCKED" target="_blank">[% completed FILTER none %]</a></td><td class="complete_cell">[% percent_completed || 0 FILTER none %]%</td></tr>
+          <tr><th class="report_header">IDLE:</th><td class="idle_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&build_id=[% builds FILTER url_quote %]&case_run_status=IDLE" target="_blank">[% idle FILTER none %]</a></td><td class="idle_cell">[% percent_idle  || 0 FILTER none %]%</td></tr>
+          <tr><th class="report_header">PASSED:</th><td class="passed_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&build_id=[% builds FILTER url_quote %]&case_run_status=PASSED" target="_blank">[% passed FILTER none %]</a></td><td class="passed_cell">[% percent_passed  || 0 FILTER none %]%</td></tr>
+          <tr><th class="report_header">FAILED:</th><td class="failed_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&build_id=[% builds FILTER url_quote %]&case_run_status=FAILED" target="_blank">[% failed FILTER none %]</a></td><td class="failed_cell">[% percent_failed  || 0 FILTER none %]%</td></tr>
+          <tr><th class="report_header">BLOCKED:</th><td class="blocked_cell"><a href="tr_list_caseruns.cgi?run_id=[% runs FILTER url_quote %]&build_id=[% builds FILTER url_quote %]&case_run_status=BLOCKED" target="_blank">[% blocked FILTER none %]</a></td><td class="blocked_cell">[% percent_blocked  || 0 FILTER none %]%</td></tr>
         </table>
       </td>
       <td><img src="tr_run_reports.cgi?type=bar&t=[% total FILTER none %]&c=[% completed FILTER none %]&p=[% passed FILTER none %]&f=[% failed FILTER none %]&b=[% blocked FILTER none %]"></td>
diff --git a/mozilla/webtools/testopia/testopia/js/build.js b/mozilla/webtools/testopia/testopia/js/build.js
index dbb9eaaff7a..72d5f27877e 100644
--- a/mozilla/webtools/testopia/testopia/js/build.js
+++ b/mozilla/webtools/testopia/testopia/js/build.js
@@ -42,7 +42,7 @@ BuildGrid = function(product_id){
       editor: new Ext.grid.GridEditor(
           mbox,{listeners: {
                  'startedit' : function(){
-                     var pid = Ext.getCmp('products-pane').getSelectionModel().getSelectedNode().id;
+                     var pid = Ext.getCmp('products_pane').getSelectionModel().getSelectedNode().id;
                      if (mbox.store.baseParams.product_id != pid){
                          mbox.store.baseParams.product_id = pid;
                          mbox.store.load();
@@ -107,7 +107,7 @@ Ext.extend(BuildGrid, Ext.grid.EditorGridPanel, {
         ]);
         var b = new NewBuild({
             name: '',
-            milestone: Ext.getCmp('products-pane').getSelectionModel().getSelectedNode().attributes.attributes.defaultmilestone,
+            milestone: Ext.getCmp('products_pane').getSelectionModel().getSelectedNode().attributes.attributes.defaultmilestone,
             description: '',
             isactive: true
         });
@@ -191,7 +191,7 @@ Ext.extend(BuildGrid, Ext.grid.EditorGridPanel, {
         else{
             myparams.action = "add";
             myparams.name = e.value;
-            myparams.milestone = Ext.getCmp('products-pane').getSelectionModel().getSelectedNode().attributes.attributes.defaultmilestone;
+            myparams.milestone = Ext.getCmp('products_pane').getSelectionModel().getSelectedNode().attributes.attributes.defaultmilestone;
             myparams.isactive = 1;
         }
         this.form.submit({
diff --git a/mozilla/webtools/testopia/testopia/js/caserun.js b/mozilla/webtools/testopia/testopia/js/caserun.js
index 87f55045be3..887e47027e3 100755
--- a/mozilla/webtools/testopia/testopia/js/caserun.js
+++ b/mozilla/webtools/testopia/testopia/js/caserun.js
@@ -1225,9 +1225,13 @@ CaseBugsGrid = function(id){
     });
     addbug = function(){
         tcid = this.tcid;
+        var tcrid;
+        if (Ext.getCmp('caserun_grid')){
+            tcrid = Ext.getCmp('caserun_grid').getSelectionModel().getSelected().get('caserun_id');
+        }
         testopia_form.submit({
             url: 'tr_process_case.cgi',
-            params: {action: 'edit', bugs: Ext.getCmp('attachbug').getValue(), case_id: this.tcid},
+            params: {action: 'edit', bugs: Ext.getCmp('attachbug').getValue(), case_id: this.tcid, caserun_id: tcrid},
             success: function(){
                 ds.load({
                     params: {case_id: tcid}
@@ -1283,6 +1287,7 @@ CaseBugsGrid = function(id){
             for (var i=0; i<store.fields.keys.length; i++){
                 url = url + store.fields.keys[i] + '=' + escape(store.getAt(0).get(store.fields.keys[i])) + '&';
             }
+            url = url + 'caserun_id=' + caserun_id;
             window.open(url, 'New Bug');
         });
     };
diff --git a/mozilla/webtools/testopia/testopia/js/plan.js b/mozilla/webtools/testopia/testopia/js/plan.js
index 298a94aae3d..5ebe69cf2e5 100644
--- a/mozilla/webtools/testopia/testopia/js/plan.js
+++ b/mozilla/webtools/testopia/testopia/js/plan.js
@@ -190,6 +190,7 @@ Ext.extend(PlanGrid, Ext.grid.EditorGridPanel, {
                 id:'plan-ctx-menu',
                 items: [{
                     text: 'Create a New Test Plan',
+                    id: 'plan_menu_new_plan',
                     icon: 'testopia/img/new.png',
                     iconCls: 'img_button_16x',
                     handler: this.newPlan.createDelegate(this)
diff --git a/mozilla/webtools/testopia/tr_builds.cgi b/mozilla/webtools/testopia/tr_builds.cgi
index b1f49fc3489..ae204b6594b 100755
--- a/mozilla/webtools/testopia/tr_builds.cgi
+++ b/mozilla/webtools/testopia/tr_builds.cgi
@@ -49,12 +49,12 @@ print $cgi->header;
 ThrowUserError("testopia-missing-parameter", {param => "product_id"}) unless $product_id;
 
 my $product = Bugzilla::Testopia::Product->new($product_id);
-ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
 
 ######################
 ### Create a Build ###
 ######################
 if ($action eq 'add'){
+    ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
     my $build = Bugzilla::Testopia::Build->create({
                   product_id  => $product->id,
                   name        => $cgi->param('name') || '',
@@ -70,6 +70,7 @@ if ($action eq 'add'){
 ### Edit a Build ###
 ####################
 elsif ($action eq 'edit'){
+    ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
     my $build = Bugzilla::Testopia::Build->new($cgi->param('build_id'));
     
     $build->set_name($cgi->param('name')) if $cgi->param('name');
@@ -82,6 +83,7 @@ elsif ($action eq 'edit'){
 }
 
 elsif ($action eq 'list'){
+    ThrowUserError('testopia-permission-denied', {'object' => $product}) unless $product->canview;
     my $json = new JSON;
     my @builds;
     my $activeonly = $cgi->param('activeonly');
@@ -103,6 +105,7 @@ elsif ($action eq 'list'){
 }
 
 elsif ($action eq 'report'){
+    ThrowUserError('testopia-permission-denied', {'object' => $product}) unless $product->canview;
     my $vars = {};
     my $template = Bugzilla->template;
     
@@ -110,11 +113,14 @@ elsif ($action eq 'report'){
     
     my @build_ids  = $cgi->param('build_ids');
     my @builds;
+    my @bug_ids;
     
     foreach my $g (@build_ids){
         foreach my $id (split(',', $g)){
             my $obj = Bugzilla::Testopia::Build->new($id);
-            push @builds, $obj if $obj->product->canedit;
+            push @builds, $obj if $obj->product->canview;
+            $obj->bugs;
+            push @bug_ids, $obj->{'bug_list'};
         }
     }
     
@@ -122,7 +128,8 @@ elsif ($action eq 'report'){
     my $passed = $builds[0]->case_run_count(PASSED, \@builds);
     my $failed = $builds[0]->case_run_count(FAILED, \@builds);
     my $blocked = $builds[0]->case_run_count(BLOCKED, \@builds);
-
+    my $idle = $builds[0]->case_run_count(IDLE, \@builds);
+    
     my $completed = $passed + $failed + $blocked;
     
     my $unfinished = $total - $completed;
@@ -135,11 +142,17 @@ elsif ($action eq 'report'){
     $vars->{'passed'} = $passed;
     $vars->{'failed'} = $failed;
     $vars->{'blocked'} = $blocked;
+    $vars->{'idle'} = $idle;
 
     $vars->{'percent_completed'} = calculate_percent($total, $completed);
     $vars->{'percent_passed'} = calculate_percent($completed, $passed);
     $vars->{'percent_failed'} = calculate_percent($completed, $failed);
     $vars->{'percent_blocked'} = calculate_percent($completed, $blocked);
+    $vars->{'percent_idle'} = calculate_percent($total, $idle);
+    
+    $vars->{'builds'} = join(',',@build_ids);
+    $vars->{'bugs'} = join(',',@bug_ids);
+    $vars->{'bug_count'} = scalar split(',', $vars->{'bugs'});
     
     $template->process("testopia/reports/completion.html.tmpl", $vars)
        || ThrowTemplateError($template->error());
diff --git a/mozilla/webtools/testopia/tr_categories.cgi b/mozilla/webtools/testopia/tr_categories.cgi
index bd51d754975..ed07303e4c7 100755
--- a/mozilla/webtools/testopia/tr_categories.cgi
+++ b/mozilla/webtools/testopia/tr_categories.cgi
@@ -46,13 +46,13 @@ print $cgi->header;
 ThrowUserError("testopia-missing-parameter", {param => "product_id"}) unless $product_id;
 
 my $product = Bugzilla::Testopia::Product->new($product_id);
-ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
 
 #########################
 ### Create a Category ###
 #########################
 
 if ($action eq 'add'){
+    ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
     my $category = Bugzilla::Testopia::Category->create({
                           product_id  => $product->id,
                           name        => $cgi->param('name'),
@@ -66,6 +66,7 @@ if ($action eq 'add'){
 ### Edit a Category ###
 #######################
 elsif ($action eq 'edit'){
+    ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
     my $category = Bugzilla::Testopia::Category->new($cgi->param('category_id'));
     
     $category->set_name($cgi->param('name')) if $cgi->param('name');
@@ -79,6 +80,7 @@ elsif ($action eq 'edit'){
 ### Delete a Category ###
 #########################
 elsif ($action eq 'delete'){
+    ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
     my $category = Bugzilla::Testopia::Category->new($cgi->param('category_id'));
     ThrowUserError("testopia-non-zero-case-count") unless $category->candelete;
     
@@ -89,6 +91,7 @@ elsif ($action eq 'delete'){
 }
 
 elsif ($action eq 'list'){
+    ThrowUserError('testopia-permission-denied', {'object' => $product}) unless $product->canview;
     my $json = new JSON;
     
     my $out;
diff --git a/mozilla/webtools/testopia/tr_process_case.cgi b/mozilla/webtools/testopia/tr_process_case.cgi
index 8bb9ab220c9..a204e4161cf 100755
--- a/mozilla/webtools/testopia/tr_process_case.cgi
+++ b/mozilla/webtools/testopia/tr_process_case.cgi
@@ -67,7 +67,7 @@ if ($action eq 'edit'){
     
     $case->add_to_run($cgi->param('addruns'));
     $case->add_tag($cgi->param('newtag'));
-    $case->attach_bug($cgi->param('bugs'));
+    $case->attach_bug($cgi->param('bugs'),$cgi->param('caserun_id'));
     
     $case->update();
 
diff --git a/mozilla/webtools/testopia/tr_quicksearch.cgi b/mozilla/webtools/testopia/tr_quicksearch.cgi
index 13a67259cc3..79a156bb608 100755
--- a/mozilla/webtools/testopia/tr_quicksearch.cgi
+++ b/mozilla/webtools/testopia/tr_quicksearch.cgi
@@ -386,8 +386,6 @@ else{
         print "{products:" . $json->objToJson(\@prods) . "}";
     }
     
-    elsif ($action eq 'getproductstree'){
-    }
     elsif ($action eq 'getclassificationstree'){
         my $node = $cgi->param('node');
         if ($node && $node ne 'classes'){
@@ -395,7 +393,14 @@ else{
             my @products;
             my $classification = Bugzilla::Testopia::Classification->new($node);
             foreach my $p (@{$classification->user_visible_products}){
-                push @products, {id => $p->id, text => $p->name, leaf => 'true', attributes =>{ defaultmilestone => $p->default_milestone}};
+                push @products, {
+                    id => $p->id, 
+                    text => $p->name, 
+                    leaf => 'true', 
+                    attributes =>{ 
+                        defaultmilestone => $p->default_milestone, 
+                        canedit => $p->canedit ? 'true':'false'
+                    }};
             }
             my $json = new JSON;
             print $json->objToJson(\@products);
diff --git a/mozilla/webtools/testopia/tr_show_product.cgi b/mozilla/webtools/testopia/tr_show_product.cgi
index 5bd2a5ce7bd..7f3e7b61da3 100755
--- a/mozilla/webtools/testopia/tr_show_product.cgi
+++ b/mozilla/webtools/testopia/tr_show_product.cgi
@@ -53,7 +53,7 @@ my $product;
 my $pid = $cgi->param('product_id') || $cgi->cookie('TESTOPIA_PRODUCT_ID') || 0;
 if ($pid){
     $product = Bugzilla::Testopia::Product->new($pid);
-    ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canedit;
+    ThrowUserError('testopia-read-only', {'object' => $product}) unless $product->canview;
     $vars->{'product'} = $product;
     $vars->{'cookiepath'} = Bugzilla->params->{'cookiepath'};
 }