- **private**: Yes --> No
--- ** [tickets:#8335] Generic search doesn't do permission checks** **Status:** closed **Milestone:** v1.12.0 **Labels:** security **Created:** Tue Oct 01, 2019 03:13 PM UTC by Dave Brondsema **Last Updated:** Fri Oct 04, 2019 09:42 PM UTC **Owner:** Dave Brondsema The search tool for project-wide search or generic tool searching (not specialized search handlers like ticket search) doesn't do permission checks and may expose some snippets of information. --- Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
