You are here: Foswiki>Tasks Web>Item15024 (28 Mar 2022, MichaelDaum)Edit Attach

Item15024: QUERY macro does not check access rights

pencil
Priority: Security
Current State: Closed
Released In: 2.1.7
Target Release: patch
Applies To: Engine
Component: QUERY
Branches: Release02x01 master
Reported By: MichaelDaum
Waiting For:
Last Change By: MichaelDaum
How to reproduce:

  • create a topic with view restrictions
  • test view access ... blocked
  • test access via FORMFIELD ... blocked
  • test access via INCLUDE ... blocked
  • test access via QUERY ... no blocked

-- MichaelDaum - 06 May 2021

 

ItemTemplate edit

Summary QUERY macro does not check access rights
ReportedBy MichaelDaum
Codebase
SVN Range
AppliesTo Engine
Component QUERY
Priority Security
CurrentState Closed
WaitingFor
Checkins distro:d1c1dc66ad0f distro:c32590393e6b
TargetRelease patch
ReleasedIn 2.1.7
CheckinsOnBranches Release02x01 master
trunkCheckins
masterCheckins distro:c32590393e6b
ItemBranchCheckins
Release02x01Checkins distro:d1c1dc66ad0f
Release02x00Checkins
Release01x01Checkins
Edit  | Attach | Print version | History: r2 < r1 | Backlinks | View wiki text | Edit wiki text | More topic actions
Topic revision: r2 - 28 Mar 2022, MichaelDaum
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy