Tickets :: [#1880] AttachedFile.php should respect permissions

Summary	AttachedFile.php should respect permissions
Queue	Wicked
Type	Bug
State	Resolved
Priority	2. Medium
Owners	chuck (at) horde (dot) org
Requester	tasin (at) fhm (dot) edu
Created	4/28/05 (7652 days ago)
Due
Updated	4/29/05 (7651 days ago)
Assigned	4/28/05 (7652 days ago)
Resolved	4/29/05 (7651 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

04/29/2005 06:32:02 PM	Chuck Hagenbuch	Comment #2 State ⇒ Resolved	Reply to this comment
Committed, thanks.

04/28/2005 10:39:42 AM	Jan Schneider	Assigned to Chuck Hagenbuch State ⇒ Assigned

04/28/2005 09:36:09 AM	tasin (at) fhm (dot) edu	Comment #1 State ⇒ Unconfirmed Priority ⇒ 2. Medium Type ⇒ Bug Summary ⇒ AttachedFile.php should respect permissions Queue ⇒ Wicked New Attachment: wicked1.diff	Reply to this comment
Like ~~Bug #915~~ only for attaching files. Actually it is possible to attach files to a page even if there is no edit permisson. It is also possible to create an "orphaned attached file" (e.g. by manual entering an URL like http://my.example.com/wicked/display.php?page=AttachedFiles&referrer=T123It where the page T123It doesn't exist). The patch should solve these probs.