• Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • 4.LATER
    • 2.0
    • Plugin Explorer
    • None
    • 1 - Middle term
    • 2 - Normal

      right protection is missing on the server side
      many bugs lead to authorize users to do unauthorized actions (see CMS-2034, or the link 'add a file' in the choose resources box)

      we have to add the protection on the server side on all actions to prevent all this kind of bugs and of course any hacking

          [EXPLORER-111] Right protection

          In the CMS, with no rights I still can upload a new file in the link dialog box : the pipelines are not protected

          Raphaël Franchet added a comment - In the CMS, with no rights I still can upload a new file in the link dialog box : the pipelines are not protected

            Unassigned Unassigned
            raphael Raphaël Franchet
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated: