You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Wendy Smoak (JIRA)" <ji...@codehaus.org> on 2006/12/26 17:43:09 UTC

[jira] Created: (CONTINUUM-1082) Projects are visible to users with no roles

Projects are visible to users with no roles
-------------------------------------------

                 Key: CONTINUUM-1082
                 URL: http://jira.codehaus.org/browse/CONTINUUM-1082
             Project: Continuum
          Issue Type: Bug
          Components: Web - Security
            Reporter: Wendy Smoak



I first noticed this with the guest/unauthenticated user, because you can see everything from project groups down to build results without logging in.

http://www.nabble.com/Projects-are-visible-to-a-guest-user-with-no-roles-t2873616.html

It's the same with any other user.  

Project Groups (and the projects within them) should not be visible at all unless the user has the "Project User" role for that group.

(If the user has no roles, it would be nice to display a helpful message rather than an empty list of Project Groups.)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] Closed: (CONTINUUM-1082) Projects are visible to users with no roles

Posted by "Emmanuel Venisse (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/CONTINUUM-1082?page=all ]

Emmanuel Venisse closed CONTINUUM-1082.
---------------------------------------

         Assignee: Emmanuel Venisse
       Resolution: Fixed
    Fix Version/s: 1.1

Already fixed.

> Projects are visible to users with no roles
> -------------------------------------------
>
>                 Key: CONTINUUM-1082
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1082
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - Security
>    Affects Versions: 1.1
>            Reporter: Wendy Smoak
>         Assigned To: Emmanuel Venisse
>             Fix For: 1.1
>
>
> I first noticed this with the guest/unauthenticated user, because you can see everything from project groups down to build results without logging in.
> http://www.nabble.com/Projects-are-visible-to-a-guest-user-with-no-roles-t2873616.html
> It's the same with any other user.  
> Project Groups (and the projects within them) should not be visible at all unless the user has the "Project User" role for that group.
> (If the user has no roles, it would be nice to display a helpful message rather than an empty list of Project Groups.)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] Updated: (CONTINUUM-1082) Projects are visible to users with no roles

Posted by "Wendy Smoak (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/CONTINUUM-1082?page=all ]

Wendy Smoak updated CONTINUUM-1082:
-----------------------------------

          Description: 
I first noticed this with the guest/unauthenticated user, because you can see everything from project groups down to build results without logging in.

http://www.nabble.com/Projects-are-visible-to-a-guest-user-with-no-roles-t2873616.html

It's the same with any other user.  

Project Groups (and the projects within them) should not be visible at all unless the user has the "Project User" role for that group.

(If the user has no roles, it would be nice to display a helpful message rather than an empty list of Project Groups.)

  was:

I first noticed this with the guest/unauthenticated user, because you can see everything from project groups down to build results without logging in.

http://www.nabble.com/Projects-are-visible-to-a-guest-user-with-no-roles-t2873616.html

It's the same with any other user.  

Project Groups (and the projects within them) should not be visible at all unless the user has the "Project User" role for that group.

(If the user has no roles, it would be nice to display a helpful message rather than an empty list of Project Groups.)

    Affects Version/s: 1.1

> Projects are visible to users with no roles
> -------------------------------------------
>
>                 Key: CONTINUUM-1082
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1082
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - Security
>    Affects Versions: 1.1
>            Reporter: Wendy Smoak
>
> I first noticed this with the guest/unauthenticated user, because you can see everything from project groups down to build results without logging in.
> http://www.nabble.com/Projects-are-visible-to-a-guest-user-with-no-roles-t2873616.html
> It's the same with any other user.  
> Project Groups (and the projects within them) should not be visible at all unless the user has the "Project User" role for that group.
> (If the user has no roles, it would be nice to display a helpful message rather than an empty list of Project Groups.)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira