Loading...
 
Features / Usability

Features / Usability


Locked Pages displayed in search result

posts: 12

Locked pages (no view permission to anonymous) are returned if an anonymous users searches for appropriate terms. Especially, the preview of the page is not intended.

Is this a bug or can this behavior be configured?

posts: 1001 Canada

It can't be configured, it's rather a bug, more or less.
It's among the long-standing known big problems in Tiki. Custom permissions on objects aren't checked in listings, like in last_* modules, etc.

Note that "Locked Pages" would refer to pages that can't be edited.


posts: 2881 United Kingdom

The search has a known security issue, by displaying snippets of permissioned pages to anonymous.

Disable search if you worry about it.

damian


Upcoming Events

No records to display

Why Register?

Register at tiki.org and you'll be able to use the account at any *.tiki.org site, thanks to the InterTiki feature. A valid email address is required to receive site notifications and occasional newsletters. You can opt out of these items at any time.