reports works even for non authenticated users

RESOLVED WONTFIX

Status

()

Bugzilla
Reporting/Charting
RESOLVED WONTFIX
14 years ago
6 years ago

People

(Reporter: macchese, Assigned: gerv)

Tracking

Details

(Reporter)

Description

14 years ago
User-Agent:       Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.6) Gecko/20040115 Epiphany/1.0.7
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.6) Gecko/20040115 Epiphany/1.0.7

using bugzilla 2.16.4, everyone not authenticated can use reports.cgi

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Actual Results:  
i can obtain results and email of the engineers

Expected Results:  
not permit using report.cgi
(Reporter)

Updated

14 years ago
Version: unspecified → 2.16.4
And how is this different from running a query from query.cgi?  You can get the
same information (engineer's information) from running queries, too.
(Reporter)

Comment 2

14 years ago
yes..if I don't login, results are always empty.....I'm wondering if I can force
users to login first of all
No, you can't force users to log in in 2.16. And in 2.17.x, these reports have
been removed.

Gerv
So we won't be fixing this bug in the 2.16 series, and it's not present in the
2.17 series, so I'm closing this bug as WONTFIX. Hope that's OK.

Gerv
Status: UNCONFIRMED → RESOLVED
Last Resolved: 14 years ago
Resolution: --- → WONTFIX
QA Contact: matty_is_a_geek → default-qa
You need to log in before you can comment on or make changes to this bug.