Patch for bug 265898: edit*.cgi files should all use ThrowUserError(); patch by Frédéric Buclin <LpSolit@gmail.com>, r=vladd, a=myk.
git-svn-id: svn://10.0.0.236/trunk@167820 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -40,7 +40,10 @@ Bugzilla->login(LOGIN_REQUIRED);
|
||||
|
||||
print Bugzilla->cgi->header();
|
||||
|
||||
ThrowUserError("auth_cant_edit_groups") unless UserInGroup("creategroups");
|
||||
UserInGroup("creategroups")
|
||||
|| ThrowUserError("auth_failure", {group => "creategroups",
|
||||
action => "edit",
|
||||
object => "groups"});
|
||||
|
||||
my $action = trim($cgi->param('action') || '');
|
||||
|
||||
|
||||
Reference in New Issue
Block a user