Edgewall Software
Modify ↓

Ticket #315 (closed defect: fixed)

Opened 8 years ago

Last modified 8 years ago

semi-bypass security

Reported by: matt@… Owned by: jonas
Priority: normal Milestone: 0.7
Component: wiki system Version: devel
Severity: normal Keywords:
Cc:
Release Notes:
API Changes:

Description

On a default, clean trac instance I issued the command "permission remove anonymous WIKI_MODIFY". The "Edit This Page" and "Attach File" links correctly disappear but appending an edit=1 query parameter to a wiki URL displays the edit page.

Note that submitting a changed wiki page does display an error so all it well in the end :).

Attachments

Change History

comment:1 Changed 8 years ago by jonas

  • Milestone set to 0.7
  • Status changed from new to assigned

comment:2 Changed 8 years ago by jonas

  • Resolution set to fixed
  • Status changed from assigned to closed

Fixed in [471].

View ↑

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
to The owner will be changed from jonas. Next status will be 'closed'
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.