[Trac-tickets] [The Trac Project] #1677: Wiki diff and history
allowed without WIKI_VIEW permission
The Trac Project
noreply at edgewall.com
Wed Jun 15 17:46:11 CDT 2005
#1677: Wiki diff and history allowed without WIKI_VIEW permission
-------------------+--------------------------------------------------------
Id: 1677 | Status: new
Component: wiki | Modified: Wed Jun 15 17:46:04 2005
Severity: major | Milestone:
Priority: high | Version: 0.8.2
Owner: jonas | Reporter: anonymous
-------------------+--------------------------------------------------------
A user (e.g. anonymous) with absolutely no WIKI_XXXX permissions can still
access the history and diffs of wiki pages via...
{{{http://.../trac/wiki/WikiPage?history=yes}}}
{{{http://.../trac/wiki/WikiPage?version=1&diff=yes}}}
--
Ticket URL: <http://projects.edgewall.com/trac/ticket/1677>
The Trac Project <>
More information about the Trac-Tickets
mailing list