Project

General

Profile

Actions
Copy link

Bug #5577

closed

CB Blogs K2 category list missing access check

Added by krileon almost 10 years ago. Updated almost 10 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
krileon
Target version:
-
Start date:
27 October 2015
Due date:
% Done:

100%

Estimated time:

Description

The category list with K2 model doesn't appear to be doing an access check on the individual categories.

https://www.joomlapolis.com/forum/153-professional-member-support/231633-cb-blogs-and-user-groups

Actions
Copy link
 #1

Updated by krileon almost 10 years ago

  • Status changed from Assigned to Rejected
  • Target version deleted (CB 2.0.12)
  • % Done changed from 0 to 100

K2 frontend submit article also does not have an access check. There simply isn't any for K2 categoryTree usage. Only view usage (getData function) bothers to check access. Rejecting as unable to fix without a fix being implemented directly into K2.

Actions
Copy link

Also available in: Atom PDF