Commit Graph

101 Commits

Author SHA1 Message Date
myk%mozilla.org
0228e535c8 Fix for bug 84338: initial implementation of attachment tracker, which lets users flag attachments with statuses.
Patch by Myk Melez <myk@mozilla.org>
r=justdave@syndicomm.com
2001-08-31 03:54:37 +00:00
jake%acutex.net
7750d44cdd Bug 96085 - bypassing group security checks using duplicate bugs
Patch by Christopher Aillon <christopher@aillon.com>
r= jake@acutex.net
2001-08-26 18:51:45 +00:00
myk%mozilla.org
f3747a93ee Fix for bug 96085: don't allow unauthorized users to access restricted bugs that do not have a QA contact.
Patch by Myk Melez <myk@mozilla.org>
r=Jake <jake@acutex.net>
2001-08-20 20:36:10 +00:00
justdave%syndicomm.com
39fd3ac872 Fix for bug 87779: thanks to the new password reset code, there was no clear way to create a new Bugzilla account from the login screen. There is now a link to createaccount.cgi from the login screen, and the text around the password reset button has been edited so it doesn't sound like you can get a new account by using it (because you can't)
Patch by Dave Miller <justdave@syndicomm.com>
r= myk@mozilla.org
2001-08-16 06:43:21 +00:00
jake%acutex.net
0b2b25c6a4 Fix for bug 95082 - Param('shutdownhtml') doesn't completely shut down bugzilla.
r= justdave@syndicomm.com
2001-08-13 19:11:35 +00:00
justdave%syndicomm.com
43755341de Fix for bug 39816: Anyone in CC, Reporter, QA Contact, or Asigned To fields can now be given access to view a bug even if the permissions on that bug are set to a group that would normally exclude those people.
Patch by Myk Melez <myk@mozilla.org>
r= justdave@syndicomm.com
2001-08-13 00:46:20 +00:00
justdave%syndicomm.com
61ef377cac Re-fix for bug 55161 - if data is partial in activity table, prepend a ? to indicate that we don't know for sure what got dropped.
Patch by Jake Steenhagen <jake@acutex.net>
r= justdave@syndicomm.com
2001-08-09 06:12:18 +00:00
jake%acutex.net
8fe9063d4d Fix for bug 92713, show_activity.pl displays zeros as non-breaking spaces.
Patch by Myk Melez <myk@mozilla.org>
r= jake@acutex.net
2001-07-30 12:52:21 +00:00
jake%acutex.net
ed69b4acf1 Fix for bugs 55161 and 12819. The activity log now stores only what's changed in multi-value fields.
r= justdave@syndicomm.com
2001-07-20 15:18:30 +00:00
justdave%syndicomm.com
eae6e119bd Fixing minor problem caused by the original bug 77473 checkin where an SQL error was being produced if you tried to log in
with an invalid username.
Patch by Myk Melez <myk@mozilla.org>
r= justdave@syndicomm.com
2001-07-16 19:38:34 +00:00
justdave%syndicomm.com
6b3b75de75 Fix for bug 77473, bug 74032, and bug 85472: Passwords are no longer stored in plaintext in the database. Passwords are no longer encrypted with MySQL's ENCRYPT() function (because it doesn't work on some installs), but with Perl's crypt() function. The crypt-related routines now properly deal with salts so that they work on systems that use methods other than UNIX crypt to crypt the passwords (such as MD5). Checksetup.pl will walk through your database and re-crypt everyone's passwords based on the plaintext password entry, then drop the plaintext password column. As a consequence of no longer having a plaintext password, it is no longer possible to email someone their password, so the login screen has been changed to request a password reset instead. The user is emailed a temporary identifying token, with a link back to Bugzilla. They click on the link or paste it into their browser and Bugzilla allows them to change their password.
Patch by Myk Melez <myk@mozilla.org>
r= justdave@syndicomm.com, jake@acutex.net
2001-07-11 05:29:21 +00:00
justdave%syndicomm.com
babcf8d29e Fix for bug 87701: Invalid username in bug changes echoed back without escaping HTML data
Patch by Gervase Markham <gervase.markham@univ.ox.ac.uk>
r= justdave@syndicomm.com
2001-07-04 07:06:00 +00:00
justdave%syndicomm.com
a2bac692b3 Fix for bug 85833: show_bug.cgi (and probably others) now allow leading or trailing spaces in the bug id, to allow for user input error. This used to work, and recent bug validation changes broke it.
Patch by Jake Steenhagen <jake@acutex.net>
r= justdave@syndicomm.com
2001-06-19 22:48:21 +00:00
jake%acutex.net
a520791008 Allow '\' as a path delimiter (bug 29064)
Patch Concept by <timeless@mac.com>
r= jake@acutex.net
2001-06-18 23:13:18 +00:00
justdave%syndicomm.com
3b98736d18 Fix for bug 15980: Password is no longer shown in the location bar on the first page you load after logging in.
Patch by Dave Miller <justdave@syndicomm.com>
r= jake@acutex.net
2001-06-07 20:26:40 +00:00
justdave%syndicomm.com
78dceec13b fix typo 2001-06-07 01:31:51 +00:00
tara%tequilarista.org
eda44f5b9f Landing Myk's patch for bug #71767 2001-06-02 22:02:02 +00:00
jake%acutex.net
d520cdb669 Bugzilla was leaking information about bugs marked secure (using bug groups). This checkin fixes bugs 39524, 39527, 39531, and 39533.
Patches by Myk Melez <myk@mozilla.org>.
r= jake@acutex.net
2001-05-31 15:52:25 +00:00
justdave%syndicomm.com
66952b81d2 Fix for bug 38859: escape invalid email addresses for HTML before displaying to the user.
Patch by Myk Melez <myk@mozilla.org>
r= jake@acutex.net, justdave@syndicomm.com
2001-05-11 18:02:38 +00:00
justdave%syndicomm.com
6d5e40ea64 Fix for bug 38855: showvotes.cgi needs to escape (untrusted) url params
Patch by Myke Melez <myk@mozilla.org>
r= jake@acutex.net
2001-05-10 02:53:22 +00:00
dave%intrec.com
63223eb3b3 Attempted fix for bug 71574: footer anomoly cleanup 2001-03-10 22:06:57 +00:00
cyeh%bluemartini.com
48ad57b909 fix for "My Votes" floating in space like a disconnected astronaut 2001-03-10 05:52:54 +00:00
cyeh%bluemartini.com
6cd18637ba fix for 54566: Software error generated when adding invalid dependencies
if we call PuntTryAgain(), make sure we've unlocked tables
2001-02-23 21:40:03 +00:00
cyeh%bluemartini.com
e09b6665c4 cleanup footer when not logged in and if using voting. 2001-02-22 22:11:27 +00:00
cyeh%bluemartini.com
bea0e72819 break Find and Report links to a seperate line so that it looks cleaner
on browser windows with shorter widths. also, the second line
matches nicely with the other table cell.
2001-02-22 21:59:25 +00:00
cyeh%bluemartini.com
2ad12d19c4 fix for 67278: Footer lines need separation
patch submitted by shie9022@msmailhub.oulan.ou.edu (Alan Shields)
make saved queries display better
2001-02-22 02:20:58 +00:00
dave%intrec.com
27ee8d4837 Fix for bug 32000 (and refixing bug 4928): extra newlines in comments made
with NS4-Mac
2001-01-16 21:09:33 +00:00
cyeh%bluemartini.com
25d54d1057 remove problem with newer perl spewing error messages into the CGI 2000-10-24 00:44:21 +00:00
cyeh%bluemartini.com
cb28da37a5 fix for 52228: Bug list title should be name of query if running named query
patch by dave@intrec.com (Dave Miller)
2000-09-18 21:29:45 +00:00
dave%intrec.com
a8b9e30b12 Fix for bug 51270: param for bodyhtml to allow sites to customize
background colors/image and link colors.
2000-09-16 14:08:37 +00:00
cyeh%bluemartini.com
5f18a20d2d fixes for 51184, 51185, 51186: allow for ldap authentication. patches
by jmrobins@tgix.com (Joe Robins). LDAP sections haven't been
tested yet, but the code is arranged such that it shouldn't disturb
existing user authentication system.
2000-09-15 18:35:18 +00:00
dave%intrec.com
bd580c2745 Fix for bug 51508: Unclosed <NOBR> around named queries in command menu.
Patch by john.beranek@pace.co.uk (John Beranek)
2000-09-07 06:22:10 +00:00
dave%intrec.com
cbfc28ce92 Fix for bug 43821: PutHeader has unbalanced <TABLE> tags. 2000-09-04 04:10:51 +00:00
cyeh%bluemartini.com
84f90e2764 fix for bug #44622: perl5.6 vs perl5.005 -w: more anal 5.6 causes errors.
patches by mtakacs@pacbell.net.
2000-08-21 19:50:41 +00:00
endico%mozilla.org
4b5a4cd8a1 added comment to value_quote referencing bugs with quoting linebreaks 2000-06-01 23:09:14 +00:00
cyeh%bluemartini.com
d329c5901c Validate value of $::FORM{who}. Thanks to Ed Korthof (edk@collab.net) for patch. 2000-05-08 18:12:28 +00:00
dmose%mozilla.org
bd72933797 Fixed a typo that was causing Perl to abort before printing the HTML
footer when a certain database inconsistency was detected.
2000-04-27 23:12:44 +00:00
donm%bluemartini.com
dad9c2b907 bug 25010 need a way to edit groups 2000-04-26 19:35:51 +00:00
endico%mozilla.org
5d31497c65 backing out because this has broken bugzilla.mozilla.org. the choice is no longer given in show_bug.cgi to make bugs confidential. I need to change lounge so it no longer automatically updates. 2000-04-19 02:14:41 +00:00
donm%bluemartini.com
9102155b3e bug 25010 add ability to easily edit groups 2000-04-18 23:12:00 +00:00
dmose%mozilla.org
f0c9ee4898 Fixed perl warning which occurs if $ENV{"CONTENT_TYPE"} is not set. 2000-03-30 23:56:36 +00:00
terry%mozilla.org
8b59d64ffe Add a bit of helpful debugging info when we get a consistancy check problem. 2000-03-23 18:20:34 +00:00
terry%mozilla.org
4143031dbc Removed warning. 2000-03-10 17:45:09 +00:00
terry%mozilla.org
c3ae7bc600 Patch by Brian Duggan <bduggan@oven.com> -- security improvements. 2000-03-07 18:23:00 +00:00
terry%mozilla.org
0e0fd005d7 Patch by Olaf Krische <krische@mbi-berlin.de> -- Fixed HTML typos. 2000-03-07 17:32:51 +00:00
terry%mozilla.org
10626c1f40 Make a universal routine to report errors in forms, so that we can
have a universal (and more noticable) way of displaying them.
2000-02-25 19:32:47 +00:00
terry%mozilla.org
edcc54480b Cut down on the number of syncshadowdb processes we fork off. 2000-02-18 21:38:23 +00:00
terry%mozilla.org
732a4ab9f6 Added an optional ability to keep a read-only shadow database, so that
bug queries can be run against it, so that these slow queries won't be
able to tie up the rest of the system.
2000-02-17 21:41:39 +00:00
terry%mozilla.org
c67a07d986 Put the "users" link in the trailer for people who are able to tweak
the permissions of other users.
2000-02-17 15:52:12 +00:00
terry%mozilla.org
718ebdae52 Major spankage. Added a new state, UNCONFIRMED. Added new groups,
"editbugs" and "canconfirm".  People without these states are now much
more limited in what they can do.

For backwards compatability, by default all users will have the
editbugs and canconfirm bits on them.  Installing this changes as is
should only have one major visible effect -- an UNCONFIRMED state
will appear in the query page.  But no bugs will become in that state,
until you tweak some of the new voting-related parameters you'll find
when editing products.
2000-02-17 05:15:23 +00:00