#22 permissions unsafe

None
closed
nobody
tl1 (1)
2017-11-29
2017-11-27
firef
No

"Bulk edit" of tickets is possible for any authenticated user, which may be a little permissive. Then again, recoll is so awesome, so...

1 Attachments
applications-painting.png

Discussion

  • firef
    firef
    2017-11-27

    • Description has changed:

    Diff:

    --- old
+++ new
@@ -1 +1 @@
-bulk edit of tickets is possible for any authenticated user, whicgh may be a little permissive. Then again, recoll is so awesome, so...
+"Bulk edit" of tickets is possible for any authenticated user, which may be a little permissive. Then again, recoll is so awesome, so...
    • milestone: -->
     
    Reply
    Link Attach

  • medoc
    medoc
    2017-11-27

    Thanks for pointing this out, but I can't seem to find a "bulk edit" section. Would you have a way to direct me more precisely to the appropriate area ?

     
    Reply
    Link Attach

  • medoc
    medoc
    2017-11-29

    Ok, still don't get the 'bulk' part, but I think that I fixed the 'any authenticated' one. Thanks for reporting this !

     
    Reply
    Link Attach

  • medoc
    medoc
    2017-11-29

    • status: accepted --> closed
     
    Reply
    Link Attach

Anonymous
Anonymous

Preview Formatting Help

Cancel   Add attachment