SearchServlet initialize pageRequest without authenticatedUser info, cause 
$url.isAuthenticatedAsAdmin function 
----------------------------------------------------------------------------------------------------------------

                 Key: ROL-1594
                 URL: 
http://opensource.atlassian.com/projects/roller/browse/ROL-1594
             Project: Roller
          Issue Type: Bug
          Components: Page Rendering & Management
    Affects Versions: 4.0
            Reporter: Miles Huang
            Assignee: Roller Unassigned
         Attachments: SearchServlet.patch

SearchServlet initialize a mock pageRequest based on parsed searchRequest, but 
without authenticUser info. Some model methods rely on it, such as 
$url.isUserAuthorizedToAuthor().

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to