Item5746: Deny VIEW on changing limit param in SEARCH
Priority: Normal
Current State: No Action Required
Released In:
Target Release: n/a
Applies To: Engine
Component:
Branches:
Changing the
limit
parameter to a higher value (e.g.
all
) in
SEARCH
disrupts access controls in certain topics whereby the user is greeted with an oops message! The user is ALLOW* to view the topic, this is confirmed by browsing the topic!
/oops/WebName/NameOfTopic?template=oopsaccessdenied;def=topic_access;param1=VIEW;param2=access%20not%20allowed%20on%20web
These topics were last modified by a user who was removed from ALLOW* in the UserGroup.
To resolve the issue, any user within the ALLOW* UserGroup must re-save the topic!
Setting
ALLOWTOPICVIEW
with the specific user doesn't resolve the problem.
How does this make sense...?
--
TWiki:Main/KwangErnLiew - 02 Jul 2008
I do not understand this bug report.
Can you explain more and with an example please?
--
TWiki:Main.KennethLavrsen - 02 Jul 2008
Kwang cannot reproduce so No Action in agreement with him
--
KennethLavrsen - 18 Dec 2008