search

pierre-alain-b / rainloop-nextcloud

Rainloop plugin for Nextcloud
110 stars 37 forks source link

Access to the admin login page by non-admin users. #212

Closed AltiUP closed 3 years ago

AltiUP commented 3 years ago

Normal users can access the admin login page of RainLoop on NC20.

Is this normal behavior?

Thank you ;) Chris

pierre-alain-b commented 3 years ago

Is this only in NC20? A priori it does not seem a major flaw and normal users will not know the password to access the admin page. Correct?

AltiUP commented 3 years ago

Is this only in NC20? A priori it does not seem a major flaw and normal users will not know the password to access the admin page. Correct?

I didn't try it on NC19 .

Yes indeed it is not very important, if they do not know the password.