Ticket #148 (closed defect: fixed)

Opened 9 months ago

Last modified 9 months ago

Disabling PermitViewPublic does not prevent anonymous viewing of the page

Reported by: rantaaho Owned by: rantaaho
Priority: major Milestone: v0.8.5
Component: system Keywords: PermitView, User
Cc: rantaaho@…

Description

If anonymous user knows the address of the page address he can view the page. Disabling PermitViewPublic?-property causes only some error message to appear in page messages but does not previewing of the page.

Attached patch fixes this and redirect's unauthorized user to login page, and after successfull login back to the restricted page. Logout will redirect to front page. In addition patch renames AccessDeny? exception to AccessDenied?.

Attachments

PermitViewPublic.patch (11.5 kB) - added by guest 9 months ago.

Change History

Changed 9 months ago by guest

Changed 9 months ago by JensDiemer

  • status changed from new to closed
  • resolution set to fixed
  • reporter changed from guest to rantaaho

Patch applied in 1416

Note: See TracTickets for help on using tickets.