Anonymous access still possible if URL is known #33

New Issue

aheathershaw · 2018-07-27T16:23:34+01:00

aheathershaw commented

2018-07-27 16:23:34 +01:00

If a user knows the direct URL to an album where anonymous access is not allowed, they are still allowed access to the album - providing at least one other album does allow anonymous users.

aheathershaw added this to the Version 2.0.2 milestone 2018-07-27 16:23:34 +01:00

aheathershaw self-assigned this 2018-07-27 16:23:34 +01:00

aheathershaw added the

bug

label 2018-07-27 16:23:34 +01:00

aheathershaw commented

2018-07-27 16:23:47 +01:00

This has been fixed in the upcoming 2.0.2 patch.

aheathershaw closed this issue

2018-07-27 16:23:48 +01:00

aheathershaw commented

2018-07-27 16:24:06 +01:00

Migrated from https://github.com/andysh-uk/blue-twilight/issues/33

Sign in to join this conversation.

No Label

No Milestone

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: aheathershaw/blue-twilight#33