jro_apps/redmine Commit - r3578:c18cb9451dfb

Fixed: private subprojects names may be revealed on issue summary report (#5360)....

Jean-Philippe Lang -

r3578:c18cb9451dfb

parent child

Context file:

r3578:c18cb9451dfb

app/controllers/reports_controller.rb +2 -2

                 @categories = @project.issue_categories
                 @assignees = @project.members.collect { |m| m.user }.sort
                 @authors = @project.members.collect { |m| m.user }.sort
-                @subprojects = @project.descendants.active
+                @subprojects = @project.descendants.visible
                 @issues_by_tracker = Issue.by_tracker(@project)
                 @issues_by_version = Issue.by_version(@project)
                   @report_title = l(:field_author)
                 when "subproject"
                   @field = "project_id"
-                  @rows = @project.descendants.active
+                  @rows = @project.descendants.visible
                   @data = Issue.by_subproject(@project) || []
                   @report_title = l(:field_subproject)
                 end

General Comments 0

You need to be logged in to leave comments. Login now

No TODOs yet

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages