Mantis Bug Tracker

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0000467ForumGeneralpublic2008-09-25 15:49
Assigned Toadministrator 
PrioritynormalSeverityminorReproducibilityhave not tried
PlatformOSOS Version
Product Version0.6.7 
Target VersionFixed in Version0.6.8 
Summary0000467: Review can_start function
Descriptiontuning and security review
TagsNo tags attached.
Attached Files

- Relationships
child of 0000465resolvedadministrator Review forum_functions code 

-  Notes
administrator (administrator)

i will also change the security check.

For now a moderator that have a start privilege can not start a thread on a read only forum...
administrator (administrator)

Security has been reviewed to work like this

- If the user is super admin return true
- If not check if it is moderator with write privilege if yes return true
- If not check that forum is active and not in ready only if yes then
- check that one user group can start then return true
- return false

- Issue History
Date Modified Username Field Change
2008-09-25 15:38 administrator New Issue
2008-09-25 15:38 administrator Status new => assigned
2008-09-25 15:38 administrator Assigned To => administrator
2008-09-25 15:38 administrator Issue generated from 0000466
2008-09-25 15:38 administrator Relationship added child of 0000465
2008-09-25 15:41 administrator Note Added: 0001174
2008-09-25 15:49 administrator Note Added: 0001175
2008-09-25 15:49 administrator Status assigned => resolved
2008-09-25 15:49 administrator Fixed in Version => 0.6.8
2008-09-25 15:49 administrator Resolution open => fixed
2008-09-25 15:49 administrator Issue cloned 0000468