Skip to Content
मेन्यू
This question has been flagged
3608 Views

This is a serious security concern, defining group access rights on menu items is not enough to restrict access to actions

How do you protect against this ? someone could just try action ids one by one until they find an existing action that gives him/her access to potentially private information.

I restricted access to a window action to a specific group, but I was still able to see it with a user that doesn't belong to that group.

Is this a bug? or am I missing something?

Avatar
Discard
Related Posts Replies Views Activity
1
अक्तू॰ 23
8371
0
मार्च 15
3803
1
मार्च 15
4993
0
मार्च 25
755
2
अक्तू॰ 24
1666