Core Bug Bingo brought me to an 'access denied' page [#483848]

Comment	File	Size	Author
#7	drupalorg-483848-7-bingo_published_only.patch	1.7 KB	simon georges
#3	483848-3.bingo_published_only.patch	1.79 KB	dww

Comment #1

dave reid

he/him

English

Nebraska USA

commented 7 June 2009 at 03:08

For some reason that issue has been marked as unpublished. Looks like it could be a security-related issue.

Log in or register to post comments

Comment #2

damien tournoud commented 7 June 2009 at 03:34

Project:	Drupal.org infrastructure	» Drupal.org customizations
Component:	Drupal.org module	» Code

It looks like the patch bingo is not correctly filtering unpublished issues.

Log in or register to post comments

Comment #3

dww

we/he/they

commented 7 June 2009 at 04:03

Status:

Active

» Needs review

Status	File	Size
new	483848-3.bingo_published_only.patch	1.79 KB

Completely untested, but something like this.

Log in or register to post comments

Comment #4

damien tournoud commented 7 June 2009 at 04:13

We probably want a db_rewrite_sql() around that too, even if it is not directly useful on d.o.

Log in or register to post comments

Comment #5

dww

we/he/they

commented 7 June 2009 at 04:22

Perhaps. There are a lot of things I'd do to make this code better if this was in project_issue, but it really is a d.o-specific hack, so things like checking node_access() or db_rewrite_sql() seemed pointless since we know d.o issue queues are public...