+ Reply to Thread
Results 1 to 2 of 2

Thread: User: Page Lists All - Possible Security Issue

  1. #1
    Join Date
    Nov 2007
    Posts
    106

    Default User: Page Lists All - Possible Security Issue

    Hello -

    In a scenario where there are multiple different groups using the wiki, and where they do not need to know about one another, having the full user list on http://my.dekiwikisite.com/User: could be a problem.

    Is there a way to turn off User: or limit its display?

    Regards,
    Rick
    Rick Cogley
    Tokyo, Japan

  2. #2
    Join Date
    Jul 2006
    Location
    San Diego, CA
    Posts
    5,450

    Default

    That's a bug and will be addressed by 1.8.3. Same for Template lists. For some reason, it's wasn't checking that the user needed BROWSE permission.
    Steve G. Bjorg - Chief Architect
    Did you check the MindTouch FAQ?
    Found a bug? Report it.
    Follow me on Twitter
    Find us on IRC: irc.freenode.net #mindtouch

+ Reply to Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts