Actions
Bug #3577
closedany user can view all users and delete them
Start date:
09/06/2011
Due date:
% Done:
0%
Estimated time:
Complexity:
Normal
Description
on STABLE
by simply typing the platform url with core.php?application=user any user gets access to the user browser and can perform almost all actions such as deleting users, creating users, ...
only when the user tries to "edit" or "log in as" the actual rights are checked
Updated by Nathalie Blocry over 12 years ago
- Status changed from New to Needs testing
should be fixed now
Updated by Nathalie Blocry about 12 years ago
- Status changed from Needs testing to Feature implemented
Actions