#1482 closed defect (bug) (duplicate)
Security Flaw: Can View Topics In Private Forums
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Milestone: | 2.0 | Priority: | high |
| Severity: | major | Version: | 1.0.1 |
| Component: | Component - Topics | Keywords: | |
| Cc: |
Description
When I go directly to the url of a topic in a private forum, I can view the topic, even though I can't view the forum. We need to add a mechanism that blocks people who don't have permission to view a forum from viewing the topics in that forum.
Note: See
TracTickets for help on using
tickets.
Sorry, I just noticed that this is a duplicate ticket...