Open McCrea opened 10 years ago
Currently a number of views check that the user is logged in but do not check if the user has permission to see a file before display said file's details. That's probably worth fixing.
Currently a number of views check that the user is logged in but do not check if the user has permission to see a file before display said file's details. That's probably worth fixing.