Check edit permissions in tasks.json.php
Bug #771623 reported by
Richard Mansfield
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Mahara |
Fix Released
|
High
|
Richard Mansfield | ||
| 1.3 |
Fix Released
|
High
|
Richard Mansfield | ||
Bug Description
This json script is used for task pagination by the owner and should check that the logged-in user is allowed to edit the plan artefact passed to the script.
CVE References
Revision history for this message
| Richard Mansfield (richard-mansfield) wrote | #1 |
| visibility: | private → public |
| Changed in mahara: | |
| status: | In Progress → Fix Committed |
| Changed in mahara: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
