ACRA / acralyzer

Open source backend for ACRA reports.
GNU General Public License v3.0
488 stars 90 forks source link

reporter can see all reports #125

Closed gregoiredx closed 7 years ago

gregoiredx commented 7 years ago

Hello,

Is there a way to prevent a "reporter" user to read existing reports?

Reporter user credentials being embedded in mobile apps, couldn't they be easily found by decompiling apk? Thus giving anybody access to all reports...

Am I wrong. Did I misconfigure something?

Anyway, thank you for this cool app.

secu2 commented 7 years ago

This is due to a couchdb limitation, a workaround is documented here : https://github.com/ACRA/acralyzer/wiki/Setting-up-a-reverse-proxy

gregoiredx commented 7 years ago

ok, thank you