Re: [Tikiwiki-users] Security leak?

[Xavier de P. P. <xav...@ub...>]

As far as I remember, it happened to me long ago (1.9.0, I think), when 
I secured viewing all the sensible tracker contents to avoid non-admin 
viewing them, but a user could just "watch" them (subscribe to receive 
e-mails) related to new tracker creation and tracker modification.
I think I reported that on dev.tw.o bugs tracker, something like "watch 
permission for trackers needed", or something similar.

I hope it could be fixed, in case it's still afecting tiki trackers.

Cheers,

Xavi

En/na Javier Arantegui ha escrit:

>Hello,
>
>Does Tikiwiki save a log of the e-mails it sends? For example, I'm interested 
>in knowing the messages it sends to remind passwords or reporting the 
>creation of new trackers. I'm the admin of the site.
>
>I want to know this because one of my users has told me that he had received 
>an e-mail with information of another user (creation of a tracker and the 
>contents of the tracker). Information that he didn't have to receive. It's 
>quite weird.
>
>Thanks in advance,
>
>Javier
>
>  
>