portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Sean Taylor <da...@bluesunrise.com>
Subject Re: [jira] Commented: (JS2-757) Removing /_user/guest folder gives edit access to all pages
Date Thu, 11 Oct 2007 22:20:17 GMT
Yup, its on my list for 2.1.3 thanks
Let me know if you see anything else slippin thru

On Oct 11, 2007, at 3:15 PM, Ethan Adams (JIRA) wrote:

>
>     [ https://issues.apache.org/jira/browse/JS2-757? 
> page=com.atlassian.jira.plugin.system.issuetabpanels:comment- 
> tabpanel#action_12534174 ]
>
> Ethan Adams commented on JS2-757:
> ---------------------------------
>
> Anyone able to reproduce this.  This seems like a showstopper to me.
>
>> Removing /_user/guest folder gives edit access to all pages
>> -----------------------------------------------------------
>>
>>                 Key: JS2-757
>>                 URL: https://issues.apache.org/jira/browse/JS2-757
>>             Project: Jetspeed 2
>>          Issue Type: Bug
>>          Components: PSML
>>    Affects Versions: 2.1.2
>>            Reporter: Ethan Adams
>>            Assignee: David Sean Taylor
>>            Priority: Critical
>>
>> Removing /_user/guest folder gives edit access to all pages when  
>> using DatabasePageManager.  To be more specific...removing any / 
>> _user/<username> folder gives that user edit access to all pages.
>
> -- 
> This message is automatically generated by JIRA.
> -
> You can reply to this email to add a comment to the issue online.
>
>

-- 
David Sean Taylor
Bluesunrise Software
david@bluesunrise.com
[office] +01 707 773-4646
[mobile] +01 707 529 9194



Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message