[Rt-commit] rt branch, 4.0/owner-autocomplete-skip-invalid-objects, created. rt-4.0.0rc4-57-g0af365c

[Thomas Sibley]

The branch, 4.0/owner-autocomplete-skip-invalid-objects has been created
        at  0af365c595fe99827b0b1425dfbe778846ae3501 (commit)

- Log -----------------------------------------------------------------
commit 0af365c595fe99827b0b1425dfbe778846ae3501
Author: Thomas Sibley <trs at bestpractical.com>
Date:   Tue Mar 1 14:09:17 2011 -0500

    Skip object specs if they're not an RT::Ticket or RT::Queue
    
    Otherwise we let crafty users load up random objects (and check who has
    OwnTicket on them) using the owners autocomplete helper.

diff --git a/share/html/Helpers/Autocomplete/Owners b/share/html/Helpers/Autocomplete/Owners
index 1b65ef8..248bc8f 100644
--- a/share/html/Helpers/Autocomplete/Owners
+++ b/share/html/Helpers/Autocomplete/Owners
@@ -76,6 +76,8 @@ my $isSU = $session{CurrentUser}
 
 # Turn RT::Ticket-1|RT::Queue-2 into ['RT::Ticket', 1], ['RT::Queue', 2]
 foreach my $spec (map { [split /\-/, $_, 2] } split /\|/, $limit) {
+    next unless $spec->[0] =~ /^RT::(Ticket|Queue)$/;
+
     my $object = $spec->[0]->new( $session{'CurrentUser'} );
 
     if ( $spec->[1] ) {

-----------------------------------------------------------------------