From 166b4bc068a8bd14608af0a6041ea373b4e2345c Mon Sep 17 00:00:00 2001 From: Frederico Camara Date: Sat, 20 Feb 2021 15:44:05 -0300 Subject: [PATCH] Change status_id first when update_issue_from_params --- app/controllers/issues_controller.rb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/controllers/issues_controller.rb b/app/controllers/issues_controller.rb index 6ae1d5b8a..74dceee82 100644 --- a/app/controllers/issues_controller.rb +++ b/app/controllers/issues_controller.rb @@ -509,7 +509,10 @@ class IssuesController < ApplicationController return false end end - @issue.safe_attributes = issue_attributes + + # Do status_id first as it could change permissions + @issue.safe_attributes = issue_attributes.slice("status_id") + @issue.safe_attributes = issue_attributes.except("status_id") @priorities = IssuePriority.active @allowed_statuses = @issue.new_statuses_allowed_to(User.current) true -- 2.25.1