[jboss-jira] [JBoss JIRA] Updated: (JBPORTAL-2155) Any CMS user can access secured cms items through preview function

Tue Sep 16 05:26:21 EDT 2008

     [ https://jira.jboss.org/jira/browse/JBPORTAL-2155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Thomas Heute updated JBPORTAL-2155:
-----------------------------------

    Fix Version/s: 2.6.7 Final


> Any CMS user can access secured cms items through preview function
> ------------------------------------------------------------------
>
>                 Key: JBPORTAL-2155
>                 URL: https://jira.jboss.org/jira/browse/JBPORTAL-2155
>             Project: JBoss Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Portal CMS
>    Affects Versions: 2.6.6 Final
>            Reporter: Martin Putz
>            Assignee: Sohil Shah
>             Fix For: 2.6.7 Final
>
>
> Any CMS user is allowed to use the preview function of the workflow if he
> 1. knows the deep link or
> 2. has the workflow manager role
> but has no read, write nor manage privilieges for the corresponding cms item.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira