Fixed: submitting a non numerical parent task input creates a 500 error (#6932).
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4414 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
parent
427ec05c8b
commit
06b0176a3e
|
@ -276,7 +276,7 @@ class Issue < ActiveRecord::Base
|
||||||
if !user.allowed_to?(:manage_subtasks, project)
|
if !user.allowed_to?(:manage_subtasks, project)
|
||||||
attrs.delete('parent_issue_id')
|
attrs.delete('parent_issue_id')
|
||||||
elsif !attrs['parent_issue_id'].blank?
|
elsif !attrs['parent_issue_id'].blank?
|
||||||
attrs.delete('parent_issue_id') unless Issue.visible(user).exists?(attrs['parent_issue_id'])
|
attrs.delete('parent_issue_id') unless Issue.visible(user).exists?(attrs['parent_issue_id'].to_i)
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
|
||||||
|
|
|
@ -526,6 +526,20 @@ class IssuesControllerTest < ActionController::TestCase
|
||||||
assert_equal Issue.find(2), issue.parent
|
assert_equal Issue.find(2), issue.parent
|
||||||
end
|
end
|
||||||
|
|
||||||
|
def test_post_create_subissue_with_non_numeric_parent_id
|
||||||
|
@request.session[:user_id] = 2
|
||||||
|
|
||||||
|
assert_difference 'Issue.count' do
|
||||||
|
post :create, :project_id => 1,
|
||||||
|
:issue => {:tracker_id => 1,
|
||||||
|
:subject => 'This is a child issue',
|
||||||
|
:parent_issue_id => 'ABC'}
|
||||||
|
end
|
||||||
|
issue = Issue.find_by_subject('This is a child issue')
|
||||||
|
assert_not_nil issue
|
||||||
|
assert_nil issue.parent
|
||||||
|
end
|
||||||
|
|
||||||
def test_post_create_should_send_a_notification
|
def test_post_create_should_send_a_notification
|
||||||
ActionMailer::Base.deliveries.clear
|
ActionMailer::Base.deliveries.clear
|
||||||
@request.session[:user_id] = 2
|
@request.session[:user_id] = 2
|
||||||
|
|
Loading…
Reference in New Issue