Forum Security Problem! If "Forum Info" enabled [message #8919] |
Sat, 01 March 2003 20:49  |
kaepten
 Messages: 9 Registered: February 2003
Karma: 0
|
Junior Member |
|
|
If "Forum Info" is enabled every new message ist shown in the info Box.
The permissions of the "Group Manager" are inoperative.
A new message in a forum which permissions are hidden=false and read=false for unregistered users is shown in the Info Box an browsable for any user!
cheers
kaepten
There are additional problems of this type. In the profile of a user is the last posted message visible and browsable! For me is this a big problem, because i have a lot of different forums with different users/permissions. But with whis security hole, all group permissions are useless!
** my sig **
[Updated on: Sat, 01 March 2003 21:12] Report message to a moderator
|
|
|
|
|
|
Re: Forum Security Problem! If "Forum Info" enabled [message #9007 is a reply to message #8987] |
Thu, 06 March 2003 15:27   |
kaepten
 Messages: 9 Registered: February 2003
Karma: 0
|
Junior Member |
|
|
Hi prottoss
Sorry for the panic. I think it was a problem of sessions/cookies (what ever) that i could see also as unregistered user the hidden posts. I have test it on another computer an it works how it should.
I don't understand: whats 2.3.8 CVS do i need it? A update is not possible, i have once again permission problems. Please see my other posting in the Intstallation-Forum.
kaepten
** my sig **
[Updated on: Thu, 06 March 2003 15:32] Report message to a moderator
|
|
|
|