Backdoors and buggy menu system

A place to discuss the testing process in beta cycles or against SVN for the CMS Made Simple CORE package.
Locked
-Marcus-

Backdoors and buggy menu system

Post by -Marcus- »

Hi.

I'm using CMS Made Simple 0.13-beta1. I've made a user with no rights able to edit only a single page by making him the owner of that page (as it should be). However the menu system doesn't allow that user to access the page; but if given a direct link to the page, the user can edit it. When i noticed this i tried accessing other pages too with the no-rights-user. I noticed that the user can access for instance image-upload and even the admin log, without having any rights to view or use those. :o
Ted
Power Poster
Power Poster
Posts: 3329
Joined: Fri Jun 11, 2004 6:58 pm

Re: Backdoors and buggy menu system

Post by Ted »

Thanks for this.

The page editing bug and the thing for the image manager are fixed.  The log I'm not too concerned about, since they can't really do anything with it.  I'll add a new permission in a later version for displaying it at all.
Locked

Return to “[locked] Quality Assurance”