Summary | AttachedFile.php should respect permissions |
Queue | Wicked |
Type | Bug |
State | Resolved |
Priority | 2. Medium |
Owners | chuck (at) horde (dot) org |
Requester | tasin (at) fhm (dot) edu |
Created | 04/28/2005 (7420 days ago) |
Due | |
Updated | 04/29/2005 (7419 days ago) |
Assigned | 04/28/2005 (7420 days ago) |
Resolved | 04/29/2005 (7419 days ago) |
Github Issue Link | |
Github Pull Request | |
Milestone | |
Patch | No |
State ⇒ Resolved
State ⇒ Assigned
State ⇒ Unconfirmed
Priority ⇒ 2. Medium
Type ⇒ Bug
Summary ⇒ AttachedFile.php should respect permissions
Queue ⇒ Wicked
New Attachment: wicked1.diff
Bug #915only for attaching files.Actually it is possible to attach files to a page even if there is no
edit permisson. It is also possible to create an "orphaned attached
file" (e.g. by manual entering an URL like
http://my.example.com/wicked/display.php?page=AttachedFiles&referrer=T123It
where the page T123It doesn't exist).
The patch should solve these probs.