udate to mantisbt 1.3.15

Author: abma

.gitignore

@@ -8,3 +8,5 @@ springpw.php
 /mantis/api
 /mantis/admin
 
+# uploads
+/uploads

mantis/adm_config_report.php

@@ -130,7 +130,7 @@ function print_config_value_as_string( $p_type, $p_value, $p_for_display = true
 	if( $p_for_display ) {
 		echo '<pre id="adm-config-value">' . string_attribute( $t_output ) . '</pre>';
 	} else {
-		echo $t_output;
+		echo string_attribute( $t_output );
 	}
 }
 

mantis/bug_report.php

@@ -82,6 +82,10 @@
 $f_master_bug_id = gpc_get_int( 'm_id', 0 );
 if( $f_master_bug_id > 0 ) {
 	bug_ensure_exists( $f_master_bug_id );
+
+	# User can view the master bug
+	access_ensure_bug_level( config_get( 'view_bug_threshold' ), $f_master_bug_id );
+
 	if( bug_is_readonly( $f_master_bug_id ) ) {
 		error_parameters( $f_master_bug_id );
 		trigger_error( ERROR_BUG_READ_ONLY_ACTION_DENIED, ERROR );

mantis/bug_report_page.php

@@ -89,6 +89,9 @@
 		trigger_error( ERROR_BUG_READ_ONLY_ACTION_DENIED, ERROR );
 	}
 
+	# User can view the master bug
+	access_ensure_bug_level( config_get( 'view_bug_threshold' ), $f_master_bug_id );
+
 	$t_bug = bug_get( $f_master_bug_id, true );
 
 	#@@@ (thraxisp) Note that the master bug is cloned into the same project as the master, independent of

mantis/core/constant_inc.php

@@ -21,7 +21,7 @@
 /**
  * Mantis Version
  */
-define( 'MANTIS_VERSION', '1.3.12' );
+define( 'MANTIS_VERSION', '1.3.15' );
 define( 'FILTER_VERSION', 'v9' );
 
 # --- constants -------------------