oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added a gotcha in case people were relying on buggy, insecure behavior

Browse source
This commit is contained in:
Doug Bell 2008-06-13 20:19:20 +00:00
parent ea3d3e9e9c
commit 7b0e1c1c97
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/gotcha.txt
View file

@ -7,6 +7,17 @@ upgrading from one version to the next, or even between multiple
versions. Be sure to heed the warnings contained herein as they will
save you many hours of grief.
7.5.13
--------------------------------------------------------------------
* RSSFromParent now uses the parent asset's canView method to
determine if the user is allowed to see the RSS feed.
The upshot of this is that a user must be able to view the
Collaboration System in order to view its RSS feed.
Previously, RSSFromParent did no view restrictions, allowing
anyone with the right URL to see an RSS feed, even if they do not
have permission to view the Collaboration System it came from.
7.5.11
--------------------------------------------------------------------
* You need the following new Perl Modules installed before you upgrade: