Differences From:
File
src/tktsetup.c
part of check-in
[b7588eb2f7]
- Fix the "Key Template" setup box under ticket configuration.
by
drh on
2008-07-19 14:15:16.
[view]
To:
File
src/tktsetup.c
part of check-in
[21326fb6f7]
- Fix enforcement of access restrictions on reports. Do not allow reports
to show the content of fields whose names begin with "private_" unless
the "e" permission is enabled.
by
drh on
2008-07-19 15:12:34.
[view]
@@ -57,8 +57,12 @@
@ </table>
style_footer();
}
+/*
+** NOTE: When changing the table definition below, also change the
+** equivalent definition found in schema.c.
+*/
/* @-comment: ** */
static const char zDefaultTicketTable[] =
@ CREATE TABLE ticket(
@ -- Do not change any column that begins with tkt_
@@ -71,9 +75,9 @@
@ subsystem TEXT,
@ priority TEXT,
@ severity TEXT,
@ foundin TEXT,
-@ contact TEXT,
+@ private_contact TEXT,
@ resolution TEXT,
@ title TEXT,
@ comment TEXT,
@ -- Do not alter this UNIQUE clause:
@@ -126,8 +130,9 @@
@ <p><font color="red"><b>ERROR: %h(zErr)</b></font></p>
}else{
db_set(zDbField, z, 0);
if( xRebuild ) xRebuild();
+ cgi_redirect("tktsetup");
}
}
@ <form action="%s(g.zBaseURL)/%s(g.zPath)" method="POST">
@ <p>%s(zDesc)</p>
@@ -277,9 +282,9 @@
@ </tr>
@
@ <tr>
@ <td align="right">EMail:
-@ <input type="text" name="contact" value="$<contact>" size="30">
+@ <input type="text" name="private_contact" value="$<private_contact>" size="30">
@ </td>
@ <td><u>Not publicly visible</u>. Used by developers to contact you with
@ questions.</td>
@ </tr>
@@ -378,9 +383,9 @@
@ $<tkt_datetime>
@ </td>
@ <th1>enable_output [hascap e]</th1>
@ <td align="right">Contact:</td><td bgcolor="#d0d0d0">
-@ $<contact>
+@ $<private_contact>
@ </td>
@ <th1>enable_output 1</th1>
@ </tr>
@ <tr><td align="right">Version Found In:</td>
@@ -462,9 +467,10 @@
@ <th1>combobox subsystem $subsystem_choices 1</th1>
@ </td></tr>
@ <th1>enable_output [hascap e]</th1>
@ <tr><td align="right">Contact:</td><td>
-@ <input type="text" name="contact" size="40" value="$<contact>">
+@ <input type="text" name="private_contact" size="40"
+@ value="$<private_contact>">
@ </td></tr>
@ <th1>enable_output 1</th1>
@ <tr><td align="right">Version Found In:</td><td>
@ <input type="text" name="foundin" size="50" value="$<foundin>">