Logged Out
Create an Account
Login:
Password:

Forgot your password?
Forum Permission Bug
Forum Permission Bug
[Back to Index]  [Bottom of Thread]
Thread Tags
Primary: [Tickets]
Secondary: None
System
Moderator
 Posts: 1006(0.96%)
Threads: 1358(1.58%)
Private Posts: 352
Posted: 5759 days ago
Link
Forum Permission Bug
Go To This Ticket's Page
Creator ron_post
Public or Private Public
Private tickets are only accessible to you and to DKPSystem.com staff
Public Tickets are visible to everyone)
Status Closed
Type Bug
Section of the Site Forum
Urgency (1 votes)
Rating (1 votes)
Description:
If you view a thread using "viewthread.php", the top header area (with title, primary/secondary tags, and so on) will contain "[Post Reply]", even if you don't have permission to post in that tag (and using it will allow you to post a reply). The default forum view uses "oldviewthread.php", and doesn't have this problem.

While this primarily shows up through the "Popular Threads" list (which has links using viewthread.php), any user can simply change their url on a viewed thread to remove the "old" part, and thus get posting privileges on tags they only have viewing permission for.

Edit: after some testing, it seems that this isn't a general problem - I was not able to handcraft a post to a tag I didn't have permission to post to. For some reason, the same testing is not taking place on replies, that is being performed on thread starting posts.
Official DKPSystem.com Comments
No official comments yet
[Login to interact]
Chops
Administrator
 Posts: 7607(7.27%)
Threads: 218(0.25%)
Private Posts: 1160


Guild(s):
PiaS
Posted: 5759 days ago
Link
Fixed. Thank you for the notification.

--
It's all in the reflexes.
[Login to interact]


[Back to Index]  [Top of Thread]


Main | Create a Site | Features | Forum | Knowledge Base | Contact | Privacy Policy

Part of the DKPSystem.com Network.