Modify

Opened 6 years ago

Last modified 2 years ago

#3886 new defect

Attachments are not protected by PrivateWiki

Reported by: freakm4ster@… Owned by: natewlew
Priority: high Component: PrivateWikiPlugin
Severity: normal Keywords:
Cc: freakm4ster@…, gpatel@… Trac Release: 0.11

Description

Hi there,

your plugin just works fine when it comes to just read/edit wikis. But, the files attached to a WikiPage are accessable nontheless.
If I misconfigured something I apologize in advance ;)

Greetings,
Christoph

Attachments (0)

Change History (3)

comment:1 Changed 5 years ago by gpatel

  • Cc gpatel@… added

I am having the same problem with my version on Trac 0.11.2. I think the attachments go through a different module than just the wiki module?

comment:2 Changed 3 years ago by natewlew

  • Owner changed from eric256 to natewlew

comment:3 Changed 2 years ago by natewlew

I think this may have been fixed by the following ticket: #3194

I just ran a test using the latest 11 version (0.11.7).

You may want to make sure that anonymous does not have any PRIVATE_VIEW or PRIVATE_EDIT privileges.

Add Comment

Modify Ticket

Action
as new .
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.