Symptom: product-level permissions change 'by themselves' :)

I suspect there is a data type conversion error at the product-level permissions. The permission table has a 'mask smallint NOT NULL' column in the DB, while the permissions from 'canadmingroups' to 'canviewownhidden' have greater values obviously according to the includes/permissions.php file.

Possible solution: extending the data type of permission.mask to integer seams to eliminate the problem.

Thanks for catching this. The upgrade script for 1.2.3 will fix the issue. Here are the queries you can use to fix this:

ALTER TABLE bugfieldpermission CHANGE mask mask int unsigned NOT NULL DEFAULT 0;
ALTER TABLE permission CHANGE mask mask int unsigned NOT NULL DEFAULT 0;

--------------- AUTOMATIC RESPONSE ---------------
Thank you for your bug report. This issue has been closed and fixed in git. This change will be available in a future release, but you can download the change at any time from the git repository, found at http://www.bluestatic.org/git/.