To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=56711
------- Additional comments from [EMAIL PROTECTED] Fri Jan 20 06:37:13 -0800 2006 ------- Thanks for the detailed update. ad 1) "intensive query for ActiveConnection" We found the developer searching for an attachment with this string. The need to login wouldn't have been a hurdle in this case. We could live with a change that make a search in attachment data unavailable. Does search in attachment metadata have similar malicious effects? Feel free to disable search in attachment data immediately. ad 2) role based query access Query results are made available to guests via URLs in documents. Examples are on the following pages http://qa.openoffice.org/issuelinks.html http://development.openoffice.org/releases/OpenOffice_org_2_x.html There are use cases where the need to login seems to be quite repelling. We have to make ready-made, but dynamic query results available. Would the restriction of access to the form (query.cgi) but not to the query itself (buglist.cgi) be a solution? Do you recommend to replace the popular IZ query on the page http://qa.openoffice.org/issue_handling/pre_submission.html with a Site Search on Issue tracker (which also reveils attachments)? Obviously this wouldn't allow the fine graint criteria. Please let us know when the plans for changes to the site behaviour assume shape. Thanks, Stefan --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
