#1559 Forums RSS provides access to "restricted" forums

v1.8.3
closed-fixed
Oliver Hertel
Security (29)
5
2004-07-21
2004-07-18
Terris Linenbach
No

0. Log in as administrator
1. Create a forum
2. Remove read access for the forum for the anonymous
user
3. Add a post to the forum
4. Log out
5. Click on "RSS Forums"

Result: You can view the most recent posts made to
this forum this way.

Discussion

  • Logged In: YES
    user_id=738765

    Hi Terris, there are no mechanisms for restricting access to
    RSS feeds in 1.8.3.

     
    • assigned_to: nobody --> ohertel
    • status: open --> pending-wont-fix
     
  • Logged In: YES
    user_id=155319

    That's fine. Will it be fixed in 1.9? Forums that don't
    have anonymous read access should be excluded from rss feeds.

     
    • status: pending-wont-fix --> open-wont-fix
     
  • Logged In: YES
    user_id=738765

    I don't know, ohertel would though.

     
  • Oliver Hertel
    Oliver Hertel
    2004-07-21

    Logged In: YES
    user_id=21633

    fixed for 1.9rc3

     
  • Oliver Hertel
    Oliver Hertel
    2004-07-21

    • status: open-wont-fix --> closed-fixed