Ticket #9965 (new enhancement)

Opened 1 year ago

Last modified 1 year ago

Reports can consist of many pages with no entries

Reported by: rjollos Assigned to: rjollos
Priority: normal Component: PrivateTicketsPlugin
Severity: normal Keywords: security
Cc: Trac Release: 0.12

Description (Last modified by rjollos)

Here is Page 1 for Report {1}:

Pages 2 and 4 look the same as Page 1.

Here is Page 3 for Report {1}:

It looks as though the page is rendered, and then all the tickets that are not viewable by this user are dropped. We need to figure out how to aggregate the entries to a single page, and only show a count that represents what the user can view. In fact, showing a count for a particular report that includes tickets a user cannot view might be considered a minor security hole.

Attachments

Report1-Page1.png (21.8 kB) - added by rjollos on 04/16/12 07:44:26.
Report1-Page3.png (34.7 kB) - added by rjollos on 04/16/12 07:44:41.

Change History

04/16/12 07:44:26 changed by rjollos

  • attachment Report1-Page1.png added.

04/16/12 07:44:41 changed by rjollos

  • attachment Report1-Page3.png added.

04/16/12 07:46:06 changed by rjollos

  • description changed.

05/15/12 02:13:13 changed by rjollos

Appears to be a duplicate of #3674. The corresponding ticket in the Trac core is t:#7608. If we close this as wontfix, then at the very least we should document the issue on the wiki page.

Add/Change #9965 (Reports can consist of many pages with no entries)




Change Properties
Action