Widgets with preview-status can still be added
----------------------------------------------
Key: RAVE-568
URL: https://issues.apache.org/jira/browse/RAVE-568
Project: Rave
Issue Type: Bug
Components: rave-web
Affects Versions: 0.10.1
Reporter: Dennis van der Laan
In the widget store, when using the category filter or 'my widgets' filter,
widgets with 'preview' status are shown also. Users are able to add
preview-widgets this way.
Because users are also able to upload widgets, which then get preview-status,
this seems like a security issue.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
