Incorrect permission check to delete freetags from objects in
- Status
- Closed
- Subject
- Incorrect permission check to delete freetags from objects in
- Version
- 18.x
- Category
- Error
- Less than 30-minutes fix
- Feature
- Modules
Tags - Resolution status
- Fixed or Solved
- Submitted by
- Rick Sapir / Tiki for Smarties
- Volunteered to solve
- Rick Sapir / Tiki for Smarties
- Lastmod by
- Rick Sapir / Tiki for Smarties
- Rating
- Description
When using the Freetag module, users must have tiki_p_admin permission to remove a tag from an object. This is incorrect, it should require tiki_p_unassign_freetags permission.
Line 9 of the freetag_list.tpl file should be changed from:
{if isset($deleteTag) and $tiki_p_admin eq 'y'} ...
to
{if isset($deleteTag) and $tiki_p_unassign_freetags eq 'y'} ...
- Solution
- Fixed in TRUNK with 65770. Backported to 18.x
- Importance
- 6
- Easy to solve?
- 10 easy
- Priority
- 60
- Demonstrate Bug on Tiki 19+
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show2.tiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Demonstrate Bug (older Tiki versions)
-
This bug has been demonstrated on show.tikiwiki.org
Please demonstrate your bug on show.tikiwiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show.tikiwiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Ticket ID
- 6567
- Created
- Friday 09 February, 2018 18:13:17 UTC
by Rick Sapir / Tiki for Smarties - LastModif
- Sunday 25 March, 2018 12:45:47 UTC