[Bug 6316] New: Stringent use of ViewArticles security mask

[email protected]
Newsgroups gmane.comp.cms.xaraya.bugs
Message-ID <[email protected]>
http://bugs.xaraya.com/show_bug.cgi?id=6316

           Summary: Stringent use of ViewArticles security mask
           Product: App - Modules
           Version: Weekly Tarball
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P3 - Standard
         Component: Articles
        AssignedTo: [email protected]
        ReportedBy: [email protected]
         QAContact: [email protected]


User-Agent:       Lynx
Build Identifier: 

Some templates and the menu neglect the difference between ViewArticles and
ReadArticles security levels.

Reproducible: Always

Steps to Reproduce:
1. Create an article of the pubtype Downloads
2. Grant prvOverview = All,All,ACCESSOVERVIEW to Everybody

Actual Results:  
Not logged in users can still access the download link (based on Notes field)

Expected Results:  
No access

Users with overview privileges should see the Articles item in the Mainmenu


-- 
Configure bugmail: http://bugs.xaraya.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

---- ** IMPORTANT ** READ BELOW ** ----
[Clip Me Start]
--------------------------------------------------------------------------
If you wish, you can reply to this message directly **however**, make sure
to use the "Reply To All" feature of your client **and** ensure that the 
bug specifier is in the subject (ie: [Bug ####]). Also, you _MUST_ have 
you're From or Reply-To address set to the same address you use to log
into your bugzilla account or your reply will not be attached to the bug.
--------------------------------------------------------------------------
[Clip Me End]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.