#1608 Removing pages without remove permissions

v1.8.4
closed-fixed
nobody
Security (29)
6
2004-08-16
2004-08-11
No

I found out that it is possible to remove wiki pages
even if you don't have the "remove" permissions, as
long as you have the "edit structure" permissions.

When you try to remove a page from a structure, it will
ask you if you only want to remove the page from the
structure or if you also want to remove the page
entirely. I guess the second option shouldn't be shown
to you if you don't normally have the right to remove
pages.

Discussion

  • Philippe Cloutier

    • status: open --> closed-fixed
     
  • Philippe Cloutier

    • labels: --> Security
    • milestone: 406228 --> v1.8.4
    • priority: 5 --> 6
     
  • Philippe Cloutier

    Logged In: YES
    user_id=738765

    Thank you for reporting, this should be fixed in CVS.
    Note that the second option is still shown for now, with the
    effect of the first one if permission is denied.

     

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks