You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@allura.apache.org by Dave Brondsema <da...@brondsema.net> on 2015/12/22 16:42:50 UTC
[allura:tickets] Re: #8005 Subprojects not checked for 'deleted' flag
On a subproject, go to its Admin / Metadata page and then change its status to Deleted (by clicking on the icon next to "Project Status"). Make sure there is a regular tool (blog, wiki, etc) installed on the subproject. Then go to the subproject URL as a logged out user. You will still see the blog or wiki or whatever is in the tool, but you should not because only admins should have access to deleted projects/subprojects.
Moreover, if you go to the parent project and install a regular tool with the same mount point as the subproject, then going to that URL shows you the deleted subproject instead of the new tool.
---
** [tickets:#8005] Subprojects not checked for 'deleted' flag**
**Status:** in-progress
**Milestone:** unreleased
**Created:** Mon Oct 19, 2015 05:15 PM UTC by Dave Brondsema
**Last Updated:** Sat Dec 19, 2015 06:01 AM UTC
**Owner:** nobody
Subprojects don't get their 'deleted' flag checked, so they are still accessible to non-admins. We should fix this.
Also, if there is a deleted subproject and a regular tool of the same name, the regular tool should always take precedence.
---
Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/
To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.