Defect #20041: User with no access to page /users can see other users. - Redmine

Actions

Defect #20041

closed

User with no access to page /users can see other users.

Added by Ivan Chensky almost 11 years ago. Updated almost 11 years ago.

Status:

Closed

Priority:

Normal

Assignee:

-

Category:

-

Target version:

-

Resolution:

Invalid

Affected version:

Description

So, for ex. my page:
https://redmine.org/users/129477

1. I have no access to see https://redmine.org/users/
2. I can access to pages of other user by this pages:
https://redmine.org/users/1
https://redmine.org/users/2
https://redmine.org/users/3
https://redmine.org/users/...

Actions

Also available in: Atom PDF