Menu

#7 guest user can add entires

v1.2
open
nobody
5
2011-06-21
2011-06-21
Anonymous
No

When doing access control via .htaccess, a user named 'guest' can add entires (rooms, racks) which should not be possible. When trying to delete something an error message is (correctly) displayed that as guest I have only read access.

Rackmonkey 1.2.5-1 on a SLES 11 SP1

Discussion


Log in to post a comment.