From 1a0837a9a0f401d4835882a34287ffc59f1f86ec Mon Sep 17 00:00:00 2001
From: wangyidong <yidong@cnezsoft.com>
Date: Wed, 18 Jun 2014 06:53:46 +0000
Subject: [PATCH]  * finish task #1881.

---
 module/bug/control.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/module/bug/control.php b/module/bug/control.php
index 6b4004eab1..4e3ce294f3 100644
--- a/module/bug/control.php
+++ b/module/bug/control.php
@@ -406,6 +406,12 @@ class bug extends control
         $bug = $this->bug->getById($bugID, true);
         if(!$bug) die(js::error($this->lang->notFound) . js::locate('back'));
 
+        if($bug->project and !$this->loadModel('project')->checkPriv($this->project->getByID($bug->project)))
+        {
+            echo(js::alert($this->lang->project->accessDenied));
+            die(js::locate('back'));
+        }
+
         /* Update action. */
         if($bug->assignedTo == $this->app->user->account) $this->loadModel('action')->read('bug', $bugID);