Uploaded image for project: '{RETIRED} XWiki Administration Application'
  1. {RETIRED} XWiki Administration Application
  2. XAADMINISTRATION-148

User can create an interesting situation by registering username XWikiGuest

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Minor
    • None
    • 1.34
    • Users, Groups, Rights
    • None

    Description

      Since there is no document called XWikiGuest there is no means of preventing registration of such a user. After registration, actual guests have the same access as the user called XWikiGuest. I'm not classifying this as a security issue since a user may simply share their password if they wish to achieve this end.
      However I think we ought to create a place holder document called XWikiGuest to improve constancy.

      Attachments

        Issue Links

          Activity

            People

              calebjamesdelisle CalebJamesDeLisle
              calebjamesdelisle CalebJamesDeLisle
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: