Project

General

Profile

Actions

Bug #7533

closed

Missing access check on gallery comment streams

Added by krileon over 3 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
18 April 2019
Due date:
% Done:

100%

Estimated time:

Description

The comment streams for per media gallery entries for group galleries is not having its create access checked to ensure the person commenting is a member of the group.

https://www.joomlapolis.com/forum/153-professional-member-support/240873-groupjive-and-cb-gallery#311923

Actions #1

Updated by krileon over 3 years ago

  • Status changed from Assigned to Resolved
  • % Done changed from 0 to 100

Multi-part fix. Requires improvements in CB Activity to handle a "parent" value for streams, which is the parent asset for the stream. The parent can then be checked for access permissions. This is fixed for all GJ comment streams requiring release of GJ, CB Activity, and CB Auto Actions. Note it will not be entirely fixed until CB Activity 5.0.0 is released.

Actions #2

Updated by krileon over 1 year ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF