Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-30876

Non logged in users can see 'publish (private)' tab

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Verified
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 11.0
    • Fix Version/s: 11.3
    • Component/s: Calendar, Calendar Summary
    • Labels:
      None
    • 11 status:
      Resolved
    • Test Plan:
      Hide

      set a site to be publicly accessible (via Site Info 'Additional access' or by adding .anon role in Sites tool) &

      1/ Visit calendar as non-logged in user, should not see the Publish (Private) button.

      2/ Visit Home Page & check Synoptic Calendar also doesn't have the publish button

      Show
      set a site to be publicly accessible (via Site Info 'Additional access' or by adding .anon role in Sites tool) & 1/ Visit calendar as non-logged in user, should not see the Publish (Private) button. 2/ Visit Home Page & check Synoptic Calendar also doesn't have the publish button

      Description

      Permission checks on displaying 'Public (Private)' button are broken or missing. Non-logged in users should not be able to generate a private URL (or regenerate an existing one).

      This when property: 'ical.opaqueurl.subscribe=true ' and 'ical.myworkspace.auto.export = true'

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                rebeccam Rebecca Miller
                Reporter:
                adamm Adam Marshall
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Git Source Code