search

BenoitTalbot / bungeni-portal

Automatically exported from code.google.com/p/bungeni-portal
0 stars 0 forks source link

Admin views are accessible by anonymous #682

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
A view like this one -- providing a list of users in the system :

http://test.bungeni.org:8080/admin/content/users/

is accessible by anonymous users.. the URL isnt available to anonymous users 
... so the present setup seems to be 'security with obscurity' all the admin 
views need to be secured..

Original issue reported on code.google.com by ashok.ha...@gmail.com on 20 Sep 2010 at 10:02

GoogleCodeExporter commented 8 years ago

Original comment by ashok.ha...@gmail.com on 12 Nov 2010 at 12:24

GoogleCodeExporter commented 8 years ago 
This issue has been fixed

Original comment by ashok.ha...@gmail.com on 30 Nov 2010 at 9:00

GoogleCodeExporter commented 8 years ago 
Fixed in r7506 - also fixes Issue 672

Original comment by ashok.ha...@gmail.com on 1 Dec 2010 at 6:57