Uploaded image for project: '{RETIRED} Curriki'
  1. {RETIRED} Curriki
  2. CURRIKI-5213

EditProfile is publicly viewable

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Blocker
    • 1.10.3 Fall 2010 update
    • None
    • None
    • None
    • 4h

    Description

      It seems that the information of about everyone can be seen using the hacked URL of EditProfile. For example I can see xxxx's page:
      /xwiki/bin/view/MyCurriki/EditProfile?user=XWiki.xxxx
      this is annoying. We should make sure EditProfile can only be called from the owning user.

      Attachments

        Activity

          People

            polx Paul Libbrecht
            polx Paul Libbrecht
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: