[Bug 6316] New: Stringent use of ViewArticles security mask
| Newsgroups | gmane.comp.cms.xaraya.bugs |
|---|---|
| Message-ID | <[email protected]> |
http://bugs.xaraya.com/show_bug.cgi?id=6316
Summary: Stringent use of ViewArticles security mask
Product: App - Modules
Version: Weekly Tarball
Platform: All
OS/Version: All
Status: NEW
Severity: minor
Priority: P3 - Standard
Component: Articles
AssignedTo: [email protected]
ReportedBy: [email protected]
QAContact: [email protected]
User-Agent: Lynx
Build Identifier:
Some templates and the menu neglect the difference between ViewArticles and
ReadArticles security levels.
Reproducible: Always
Steps to Reproduce:
1. Create an article of the pubtype Downloads
2. Grant prvOverview = All,All,ACCESSOVERVIEW to Everybody
Actual Results:
Not logged in users can still access the download link (based on Notes field)
Expected Results:
No access
Users with overview privileges should see the Articles item in the Mainmenu
--
Configure bugmail: http://bugs.xaraya.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
---- ** IMPORTANT ** READ BELOW ** ----
[Clip Me Start]
--------------------------------------------------------------------------
If you wish, you can reply to this message directly **however**, make sure
to use the "Reply To All" feature of your client **and** ensure that the
bug specifier is in the subject (ie: [Bug ####]). Also, you _MUST_ have
you're From or Reply-To address set to the same address you use to log
into your bugzilla account or your reply will not be attached to the bug.
--------------------------------------------------------------------------
[Clip Me End]