[Tickets #10811] No permissions check in Dynamic Kronolith Apps Menu

bugs at horde.org bugs at horde.org
Tue Nov 29 14:21:34 UTC 2011


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10811
------------------------------------------------------------------------------
  Ticket             | 10811
  Created By         | sberthelot at emisfr.com
  Summary            | No permissions check in Dynamic Kronolith Apps Menu
  Queue              | Kronolith
  Version            | Git master
  Type               | Bug
  State              | Unconfirmed
  Priority           | 2. Medium
  Milestone          |
  Patch              | 1
  Owners             |
------------------------------------------------------------------------------


sberthelot at emisfr.com (2011-11-29 14:21) wrote:

When building the top apps menu in Kronolith the template code does  
not check if user has permission to Show this app.

Found when testing with limited permissions users getting the links  
even if they shouldn't

Attached is a trivial tested working patch



sberthelot at emisfr.com (2011-11-29 14:21) uploaded:  
kronolith-apps-menu-perms.patch

http://bugs.horde.org/h/services/download/?module=whups&actionID=download_file&file=kronolith-apps-menu-perms.patch&ticket=10811&fn=%2Fkronolith-apps-menu-perms.patch





More information about the bugs mailing list