Defect #4691
Permission on "my page"
| Status: | Closed | Start date: | 2010-01-29 | |
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assignee: | - | % Done: | 0% |
|
| Category: | Permissions and roles | |||
| Target version: | 0.9.2 | |||
| Affected version: | 0.9.1 | Resolution: | Fixed |
Description
If I add the calendar to "my page" I can see the issues also if my role doesn't allow it (role: issue tacking/view issue).
Redmine 0.8.7.devel.3092 (MySQL)
Associated revisions
Fixed: potential security leak on my page calendar (#4691).
History
Updated by Jean-Philippe Lang about 2 years ago
- Status changed from New to Closed
- Target version set to 0.9.2
- Affected version changed from 0.8.7 to 0.9.1
- Resolution set to Fixed
Fixed in r3351.