[Treebase-guts] [ treebase-Bugs-2931595 ] phylows gives access to data belonging to non-public studies

[SourceForge.net <no...@so...>]

Bugs item #2931595, was opened at 2010-01-13 20:37
Message generated for change (Comment added) made by rvos
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1126676&aid=2931595&group_id=248804

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: ui
Group: None
>Status: Closed
Priority: 8
Private: No
Submitted By: William Piel (sfrgpiel)
>Assigned to: Rutger Vos (rvos)
Summary: phylows gives access to data belonging to non-public studies

Initial Comment:
The phylows API, even without a special access parameter, is giving access to data from studies that are still either "in progress" or "ready" (but not "published"). For example, this URL resolves, when it ought not to:

http://treebasedb-dev.nescent.org:6666/treebase-web/phylows/study/TB2:S44



----------------------------------------------------------------------

>Comment By: Rutger Vos (rvos)
Date: 2010-01-15 14:24

Message:
Fixed as of revision 446. For unpublished studies, the x-access-code
parameter is required, otherwise the user is redirected to the
accessviolation.html error page.

----------------------------------------------------------------------

Comment By: Rutger Vos (rvos)
Date: 2010-01-15 14:24

Message:
Your bug has been resolved.  Thanks for the report.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1126676&aid=2931595&group_id=248804