Fixed: users should not be able to add relations with issues they're not allowed to view (#2589).
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2323 e93f8b46-1217-0410-a6f0-8f06a7374b81
Showing
- app/controllers/issue_relations_controller.rb 3 additions, 0 deletionsapp/controllers/issue_relations_controller.rb
- app/models/issue_relation.rb 2 additions, 0 deletionsapp/models/issue_relation.rb
- test/functional/issue_relations_controller_test.rb 36 additions, 0 deletionstest/functional/issue_relations_controller_test.rb
Please register or sign in to comment