<?xml version="1.0" encoding="UTF-8"?> 
<?xml-stylesheet href="https://dev.horde.org/themes/horde//default/feed-rss.xsl" type="text/xsl"?> 
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> 
 <channel> 
  <title>AttachedFile.php should respect permissions </title> 
  <pubDate>Fri, 10 Apr 2026 14:48:30 +0000</pubDate> 
  <link>https://bugs.horde.org/ticket/1880</link> 
  <atom:link rel="self" type="application/rss+xml" title="AttachedFile.php should respect permissions " href="https://bugs.horde.org/ticket/1880/rss" /> 
  <description>AttachedFile.php should respect permissions </description> 
 
   
   
  <item> 
   <title>Like Bug #915 only for attaching files.



Actually it is po</title> 
   <description>Like Bug #915 only for attaching files.



Actually it is possible to attach files to a page even if there is no edit permisson. It is also possible to create an &quot;orphaned attached file&quot; (e.g. by manual entering an URL like http://my.example.com/wicked/display.php?page=AttachedFiles&amp;referrer=T123It where the page T123It doesn&#039;t exist).

The patch should solve these probs.



</description> 
   <pubDate>Thu, 28 Apr 2005 09:36:09 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/1880#t7772</link> 
  </item> 
   
  <item> 
   <title>Committed, thanks.</title> 
   <description>Committed, thanks.</description> 
   <pubDate>Fri, 29 Apr 2005 18:32:02 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/1880#t7818</link> 
  </item> 
   
   
 
 </channel> 
</rss> 
