-
Bug
-
Resolution: Unresolved
-
Major
-
2.0
-
None
-
1 - Middle term
-
2 - Normal
right protection is missing on the server side
many bugs lead to authorize users to do unauthorized actions (see CMS-2034, or the link 'add a file' in the choose resources box)
we have to add the protection on the server side on all actions to prevent all this kind of bugs and of course any hacking