[Dnfbb-developers] [ dnfbb-Bugs-1585244 ] Feeds can access admin only forums
Brought to you by:
sbosanquet,
tectsoft
|
From: SourceForge.net <no...@so...> - 2006-10-27 21:09:48
|
Bugs item #1585244, was opened at 2006-10-26 17:40 Message generated for change (Comment added) made by sbosanquet You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784889&aid=1585244&group_id=152364 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Feeds Group: Version 1 Status: Closed Resolution: Accepted Priority: 9 Private: No Submitted By: Bosie (sbosanquet) Assigned to: Si (tectsoft) Summary: Feeds can access admin only forums Initial Comment: Looking at the firebird board www.dnfbb.net the admin only board posts can be read in the rss feed. This feed should not be able to see any of the posts which do not have feed or guest access ---------------------------------------------------------------------- >Comment By: Bosie (sbosanquet) Date: 2006-10-27 21:09 Message: Logged In: YES user_id=1025541 Found to be present in v1 release of MySQL database version as well ---------------------------------------------------------------------- Comment By: Si (tectsoft) Date: 2006-10-27 08:35 Message: Logged In: YES user_id=1154545 I was thnking about this, until we implement this fr http://sourceforge.net/tracker/index.php?func=detail&aid=1558205&group_id=152364&atid=784892 I have made the feed use guest user, so that the feeds will only report what a guest can see for now. This has been updated for version 1.1 ---------------------------------------------------------------------- Comment By: Si (tectsoft) Date: 2006-10-26 18:45 Message: Logged In: YES user_id=1154545 I have turned the feeds off for now, however, I would class this as a symptom of a feature request: http://sourceforge.net/tracker/index.php?func=detail&aid=1558205&group_id=152364&atid=784892 In that, until a feed uses the username/password then this is inevitable. I have added a FR which should combat this in the future, and add more flexibility: http://sourceforge.net/tracker/index.php?func=detail&aid=1585282&group_id=152364&atid=784892 rgds Si ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=784889&aid=1585244&group_id=152364 |