search

PiRSquared17 / improved-accesscontrol

Automatically exported from code.google.com/p/improved-accesscontrol
0 stars 0 forks source link

History protection #3

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Only the latest access controls are queried for history. If you have
restricted content that was removed and the page later made public, the
history will also be public.

Steps to reproduce:
1. Save a page with an <accesscontrol> tag.
2. Edit the page and remove the tag.
3. View history and select the version with the tag as an anonymous user.
Content will load.

Preferred result: Content is blocked even if latest version is unprotected.

Original issue reported on code.google.com by eisenst...@gmail.com on 10 Nov 2008 at 7:49