Opened 10 years ago
Last modified 10 years ago
#11662 closed defect
No permission check on repository that raises a TracError — at Initial Version
| Reported by: | Ryan J Ollos | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | 1.0.2 |
| Component: | version control/browser | Version: | |
| Severity: | normal | Keywords: | |
| Cc: | Branch: | ||
| Release Notes: | |||
| API Changes: | |||
| Internal Changes: | |||
Description
To reproduce:
- Create a repository with an invalid path.
- Revoke
BROWSER_VIEWfor the user.
The Browse Source tab will be visible and the repository can be viewed from the repository index.
In [10006#file2] a permission check was added on 0.12-stable, but the length of the tuple was changed in [9976] for 1.0.
Note:
See TracTickets
for help on using tickets.
