#1557 logs files in /home/groupoffice/log/* are listed on "Files modified in the past 7 days"

v4.x
closed
nobody
None
1
2013-04-17
2012-11-19
platix
No

logs files in /home/groupoffice/log/* are listed on "Files modified in the past 7 days" Portlet of home and an unprivileged user of GO can download it.
Tested on fresh install on debian 6 and GO 4.0.130

Discussion

  • If you rebuild the search cache they will disappear. A user shouldn't be able to open them in 4.0.130.

     
  • platix
    platix
    2012-11-22

    I do all the parts in Start menu -> Admin tools and the user still can open these files...

     
  • Are you sure you running 4.0.130 and you ran the database check and the build search cache?

    The user is not an admin right?

     
  • platix
    platix
    2012-11-22

    yes, 4.0.130 from debian repos of the intermesh. User has files, calendar, comments, contacts, content, email, notes, search, sieve, task and webdav server with the use right.
    And ran the scripts in admin tools:
    Database check
    Create search index
    Remove duplicate contacts and events
    Reset state of windows, grids etc.
    Sync filesystem with files database.

    same result...

     
  • platix
    platix
    2012-11-28

    on fresh install of 132, same result, unprivileged user can view and download log/error.log file in this widget

     
  • I can't replicate this. Are you sure you didn't grant access to the folder?

     
    • status: open --> pending
     
    • status: pending --> closed