search

hovel / pybbm

Django forum solution. Tested, documented, shipped with example project.
BSD 2-Clause "Simplified" License
225 stars 151 forks source link

Fix incorrect permissions check in UserTopics view #216

Closed skolsuper closed 8 years ago

skolsuper commented 8 years ago

By requesting a list of an admin users topics, unauthenticated users can see a list of hidden topics.

lampslave commented 8 years ago

OMG... Thank you.