Non-logged in users should not be able to view Control Panel

Bug #246025 reported by Greg A
2
Affects Status Importance Assigned to Milestone
Ubuland
Critical
Unassigned

Bug Description

Currently, even non-logged in users can manually navigate to "index.php?page=ucp/Home" and other Control Panel pages. An error should be shown when attempting to view these pages when not logged in.

Similar is true of the admin control panel (navigate to "index.php?page=acp/Home"). This is especially important as we don't want anyone viewing admin information.

Revision history for this message
David Futcher (bobbo) wrote :

Confirming. This should be easy enough to fix.

Changed in ubuland:
assignee: nobody → bobbo
importance: Undecided → Critical
milestone: none → alpha-two
status: New → In Progress
Revision history for this message
David Futcher (bobbo) wrote :

Fix committed in -devel revision 161.

Changed in ubuland:
status: In Progress → Fix Committed
Revision history for this message
David Futcher (bobbo) wrote :

Fix released with alpha-two.

Changed in ubuland:
assignee: bobbo → nobody
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers