Flyspray - The bug killer!

  • Status Closed
  • Percent Complete
    100%
  • Task Type Bug Report
  • Category User Interface
  • Assigned To No-one
  • Operating System All
  • Severity Low
  • Priority Very Low
  • Reported Version 1.0-rc
  • Due in Version Undecided
  • Due Date Undecided
  • Votes
  • Private
Attached to Project: Flyspray - The bug killer!
Opened by Ioannis Protonotarios - 25.10.2016
Last edited by peterdd - 25.10.2016

FS#2302 - Private Flyspray reveals project names

I have a Flyspray with all projects set to private. If an anonymous visitor types a taskid in search box, they get a 102 “no permission” error but the page title will change to that task’s project name.

Closed by  peterdd
25.10.2016 20:49
Reason for closing:  Implemented in devel
Admin
peterdd commented on 25.10.2016 17:16

I made 2 small commits now on github. Please test with github master if this solves the problem.

Ioannis Protonotarios commented on 25.10.2016 20:11

Solved!

No taskid search. And if I try a manual url like "..../index.php?do=details&task_id=123" I get a 102 “no permission” error but with no project name. Instead, the "All projects" title disappears.

Loading...

Available keyboard shortcuts

Tasklist

Task Details

Task Editing