249835 - reports works even for non authenticated users

Status: RESOLVED WONTFIX

(Bugzilla :: Reporting/Charting, defect)

Description

[macchese]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.6) Gecko/20040115 Epiphany/1.0.7
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.6) Gecko/20040115 Epiphany/1.0.7

using bugzilla 2.16.4, everyone not authenticated can use reports.cgi

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Actual Results:  
i can obtain results and email of the engineers

Expected Results:  
not permit using report.cgi

Comment 1

[Dave Miller [:justdave]]

And how is this different from running a query from query.cgi?  You can get the
same information (engineer's information) from running queries, too.

Comment 2

[macchese]

yes..if I don't login, results are always empty.....I'm wondering if I can force
users to login first of all

Comment 3

[Gervase Markham [:gerv]]

No, you can't force users to log in in 2.16. And in 2.17.x, these reports have
been removed.

Gerv

Comment 4

[Gervase Markham [:gerv]]

So we won't be fixing this bug in the 2.16 series, and it's not present in the
2.17 series, so I'm closing this bug as WONTFIX. Hope that's OK.

Gerv