We have a number of products in several classifications. Some of these products are open to the public and others are restricted. As a non privilged user on the advanced search page the clasification and product list correctly shows only the open products. However, when I click a classification in the list with a mix of open and closed products, all the products are displayed. This is due to the way the Classification->products method returns the list of products. It simply selects all of them in the classification.
Summary: Classification->products returns all products regardless of user privileges → Unprivilged users are able to view restricted products on query.cgi
Already fixed on tip
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → INVALID
This has been fixed in bug 312933 one year ago. :)
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.