Vote #80209
完了Total estimated time issue query column and issue field might leak information
0%
説明
The total estimated time information will show the sum of the estimated times of the issues and its subissues. This calculation does not verify if the current user is allowed to see the sub issues though, which might lead to an information leak.
Attached is a patch with a test for this issue. This patch was created and contributed by Gregor Schmidt.
journals
Setting the target version to 4.0.5.
--------------------------------------------------------------------------------
Committed the fix. Thank you.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
related_issues
relates,Closed,32022,IssueSubtaskingTest fails with high probability