[Trac-tickets] [The Trac Project] #1677: Wiki diff and history allowed without WIKI_VIEW permission

The Trac Project noreply at edgewall.com
Wed Jun 15 17:46:11 CDT 2005


#1677: Wiki diff and history allowed without WIKI_VIEW permission
-------------------+--------------------------------------------------------
       Id:  1677   |      Status:  new                     
Component:  wiki   |    Modified:  Wed Jun 15 17:46:04 2005
 Severity:  major  |   Milestone:                          
 Priority:  high   |     Version:  0.8.2                   
    Owner:  jonas  |    Reporter:  anonymous               
-------------------+--------------------------------------------------------
 A user (e.g. anonymous) with absolutely no WIKI_XXXX permissions can still
 access the history and diffs of wiki pages via...

 {{{http://.../trac/wiki/WikiPage?history=yes}}}

 {{{http://.../trac/wiki/WikiPage?version=1&diff=yes}}}

-- 
Ticket URL: <http://projects.edgewall.com/trac/ticket/1677>
The Trac Project <>


More information about the Trac-Tickets mailing list