Permissions not or only improperly checked in some contexts #19
標籤
未選擇里程碑
No Assignees
1 參與者
訊息
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: crtxcr/qswiki#19
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
When a user has no permission to see the page history, he still knows about older entries from the global history pages, which can be a metadata leak. They should not be there
Search must also consider permissions such as can_read etc.
Permissions not or improperly checked in some contextsto Permissions not or only improperly checked in some contexts