Edgewall Software
Modify ↓

Opened 20 years ago

Closed 20 years ago

Last modified 11 years ago

#315 closed defect (fixed)

semi-bypass security

Reported by: matt@… Owned by: Jonas Borgström
Priority: normal Milestone: 0.7
Component: wiki system Version: devel
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

On a default, clean trac instance I issued the command "permission remove anonymous WIKI_MODIFY". The "Edit This Page" and "Attach File" links correctly disappear but appending an edit=1 query parameter to a wiki URL displays the edit page.

Note that submitting a changed wiki page does display an error so all it well in the end :).

Attachments (0)

Change History (2)

comment:1 by Jonas Borgström, 20 years ago

Milestone: → 0.7
Status: new → assigned

comment:2 by Jonas Borgström, 20 years ago

Resolution: → fixed
Status: assigned → closed

Fixed in [471].

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Jonas Borgström.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from Jonas Borgström to the specified user.

Add Comment
E-mail address and name can be saved in the Preferences .
Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.