search

silverstripe-terraformers / silverstripe-embargo-expiry

BSD 3-Clause "New" or "Revised" License
7 stars 7 forks source link

Deny embargo/expiry setting without publish permissions on record #8

Closed chillu closed 6 years ago

chillu commented 6 years ago

At the moment, an author without publishing permissions can circumvent that restriction by scheduling a publish, which is a bit of a security issue.

chrispenny commented 6 years ago

Solved in https://github.com/silverstripe-terraformers/silverstripe-embargo-expiry/pull/19