From: SourceForge.net <no...@so...> - 2005-04-13 03:24:34
|
Bugs item #1177057, was opened at 2005-04-05 23:37 Message generated for change (Comment added) made by richard You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=402788&aid=1177057&group_id=31577 Category: Mail interface Group: 0.8.x >Status: Closed >Resolution: Fixed Priority: 5 Submitted By: Jouni K Seppänen (jouni) Assigned to: Richard Jones (richard) Summary: Prevent anon users registering via email, allow via web Initial Comment: In 0.8.2, despite removing the permission db.security.addPermissionToRole('Anonymous', 'Email Access') it is possible for the anonymous user to access the tracker, if the Create User permission is not removed (and removing it prevents registration via the web interface); see http://thread.gmane.org/gmane.comp.bug-tracking.roundup.user/5194 The attached patch seems to fix this. ---------------------------------------------------------------------- >Comment By: Richard Jones (richard) Date: 2005-04-13 13:24 Message: Logged In: YES user_id=6405 Thanks! ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=402788&aid=1177057&group_id=31577 |