Details
-
Bug
-
Resolution: Fixed
-
Blocker
-
1.2 M1
-
Integration
-
High
-
Very hard
-
N/A
-
Description
To reproduce:
Create a new document and restrict it's view to XWikiAdminGroup.
Delete this document.
Visit the url of the deleted document with `?rev=deleted:NN` as the guest user. NN is an enumerable number assigned to the deletion.
Its content is visible
Attachments
Issue Links
- relates to
-
XWIKI-20685 No extra right check in script API when accessing deleted documents
- Closed