Page 1 of 1

Backdoors and buggy menu system

Posted: Sun May 07, 2006 1:30 am
by -Marcus-
Hi.

I'm using CMS Made Simple 0.13-beta1. I've made a user with no rights able to edit only a single page by making him the owner of that page (as it should be). However the menu system doesn't allow that user to access the page; but if given a direct link to the page, the user can edit it. When i noticed this i tried accessing other pages too with the no-rights-user. I noticed that the user can access for instance image-upload and even the admin log, without having any rights to view or use those. :o

Re: Backdoors and buggy menu system

Posted: Wed May 10, 2006 12:54 am
by Ted
Thanks for this.

The page editing bug and the thing for the image manager are fixed.  The log I'm not too concerned about, since they can't really do anything with it.  I'll add a new permission in a later version for displaying it at all.