A simple user is allowed to list all screens which contain low level discovery graphs

XMLWordPrintable

    • Type: Defect (Security)
    • Resolution: Fixed
    • Priority: Trivial
    • None
    • Affects Version/s: 2.4.6
    • Component/s: Frontend (F)

      Hi,
      I have a user with rights on only one group. The user can "list" all screens which use ldd even if he hasn't rights. If the screen not contains ldd, the screen doesn't appears in the list.
      In any case, user cannot read the screen where is has not permission.

            Assignee:
            Unassigned
            Reporter:
            Mickael Martin
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: