Unprivilged users are able to view restricted products on query.cgi

VERIFIED INVALID

Status

()

Bugzilla
Query/Bug List
--
critical
VERIFIED INVALID
12 years ago
12 years ago

People

(Reporter: Greg Hendricks, Unassigned)

Tracking

Details

(Reporter)

Description

12 years ago
We have a number of products in several classifications. Some of these products are open to the public and others are restricted. 

As a non privilged user on the advanced search page the clasification and product list correctly shows only the open products. However, when I click a classification in the list with a mix of open and closed products, all the products are displayed. 

This is due to the way the Classification->products method returns the list of products. It simply selects all of them in the classification.
(Reporter)

Updated

12 years ago
Summary: Classification->products returns all products regardless of user privileges → Unprivilged users are able to view restricted products on query.cgi
(Reporter)

Comment 1

12 years ago
Already fixed on tip
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → INVALID

Comment 2

12 years ago
This has been fixed in bug 312933 one year ago. :)
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.