Roundup Tracker - Issues

Issue 1431188

classification
menu() gives unconditional access to linked items.
Type: Severity: normal
Components: Web interface Versions:
process
Status: closed fixed
:
: richard : richard, stefan
Priority: normal :

Created on 2006-02-14 02:05 by stefan, last changed 2006-02-14 02:05 by stefan.

Files
File name Uploaded Description Edit Remove
patch stefan, 2006-02-14 02:05 Add permission filter to menu() implementations.
Messages
msg2159 Author: [hidden] (stefan) Date: 2006-02-14 02:05
The menu() code for LinkHTMLProperty and 
MultiLinkHTMLProperty doesn't perform the
required filtering to mask the items the
user isn't allowed to see. The attached
patch fixes this.
History
Date User Action Args
2006-02-14 02:05:33stefancreate