Bug: Rdiff Ignores Web Permissions
Rdiff ignores permissions. I'm not so sure how much better I can describe the bug. It has been tested by myself and confirmed on seperate twiki systems. We fixed this locally by adding in the permission checking code from 'view'.
Test case
Enter into a search, select all searchable webs. When the web results return, click on the date links under 'Changed' and it'll load the change diffs for any web in the return results regardless of view/change permissions.
Environment
| TWiki version: |
Dec. 01, 2001 |
| TWiki plugins: |
N/A |
| Server OS: |
FreeBSD |
| Web server: |
Apache |
| Perl version: |
N/A |
| Client OS: |
N/A |
| Web Browser: |
N/A |
--
JessieBrickner - 31 Jan 2003
Follow up
Fix record
Thanks for reporting, is in
TWikiAlphaRelease and at TWiki.org.
--
PeterThoeny - 01 Feb 2003