diff options
author | 2015-12-18 12:53:50 +0100 | |
---|---|---|
committer | 2015-12-18 12:53:50 +0100 | |
commit | fb4f6f7b1574be030d7f592be91771905d00a620 (patch) | |
tree | 10f1ecdff5c248a679e502526ed6716499c312b0 | |
parent | Bug 1232578: Don't save hashed passwords in audit_log (diff) | |
download | bugzilla-fb4f6f7b1574be030d7f592be91771905d00a620.tar.gz bugzilla-fb4f6f7b1574be030d7f592be91771905d00a620.tar.bz2 bugzilla-fb4f6f7b1574be030d7f592be91771905d00a620.zip |
Bug 1232190: FlagType.create should require the user to be logged in
r/a=dkl
-rw-r--r-- | Bugzilla/WebService/FlagType.pm | 10 |
1 files changed, 3 insertions, 7 deletions
diff --git a/Bugzilla/WebService/FlagType.pm b/Bugzilla/WebService/FlagType.pm index 9723d4735..9d7cce037 100644 --- a/Bugzilla/WebService/FlagType.pm +++ b/Bugzilla/WebService/FlagType.pm @@ -61,11 +61,9 @@ sub get { sub create { my ($self, $params) = @_; + my $user = Bugzilla->login(LOGIN_REQUIRED); - my $dbh = Bugzilla->dbh; - my $user = Bugzilla->user; - - Bugzilla->user->in_group('editcomponents') + $user->in_group('editcomponents') || scalar(@{$user->get_products_by_permission('editcomponents')}) || ThrowUserError("auth_failure", { group => "editcomponents", action => "add", @@ -121,11 +119,9 @@ sub create { sub update { my ($self, $params) = @_; - my $dbh = Bugzilla->dbh; - my $user = Bugzilla->user; + my $user = Bugzilla->login(LOGIN_REQUIRED); - Bugzilla->login(LOGIN_REQUIRED); $user->in_group('editcomponents') || scalar(@{$user->get_products_by_permission('editcomponents')}) || ThrowUserError("auth_failure", { group => "editcomponents", |