[CMFVisualEditor 0.2] : dtml-tree security problem

Brought to you by: ajung, azy, batlogg, bcsaller, and 35 others

#32 [CMFVisualEditor 0.2] : dtml-tree security problem

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2003-08-13

Created: 2003-08-13

Private: No

In editor_browse_files.html.dtml and
editor_browse_images.html.dtml, there are a "dtml-tree"
call.

When members try to browse files or images, there is an
access error, because members are not allowed to browse
all the site objects.

Adding "skip_unauthorized=1" in dtml-tree attributes
corrects this problem.