Check view permissions in blog posts.json.php

Bug #771653 reported by Richard Mansfield
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Fix Released
High
Richard Mansfield
1.3
Fix Released
High
Richard Mansfield

Bug Description

This script is for blog post pagination when viewing a blog block or artefact within the context of a View, but needs to check that the user is allowed to see the View. Similar problem to bug #771637.

Does not affect Mahara 1.2 (there was no pagination within views).

CVE References

Revision history for this message
Richard Mansfield (richard-mansfield) wrote :
visibility: private → public
Changed in mahara:
status: In Progress → Fix Committed
Changed in mahara:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.