Title | WeblogPlugin does not consider ACL |
Date | 06-Dec-2006 18:02:27 EET |
Version | 2.4 |
Submitter | HongJieDai |
Bug criticality | BadBug |
Browser version | FF/IE |
Bug status | ClosedBug |
PageProvider used | |
Servlet Container | Tomcat 4.1 |
Operating System | Windows XP/2k3 |
URL | |
Java version | 1.5 |
For a wiki page
[{WeblogPlugin startDate='300604' days='30' allowComments=false}]
or in the URL:
Wiki.jsp?page=MyBlog&weblog.startDate=061006&weblog.days=30
In this two situation, all of them will not consider ACL, and display all page among those days.
Fixed in 2.5.67 - user must now have view permission to all entries. Any entry that the user does not have view permission to, will be skipped.
Add new attachment
Only authorized users are allowed to upload new attachments.