Bugs item #1358131, was opened at 2005-11-16 08:09
Message generated for change (Settings changed) made by tdonohue
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=119984&aid=1358131&group_id=19984

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Workflow
Group: 1.3.2
>Status: Closed
>Resolution: Out of Date
Priority: 5
Private: No
Submitted By: Claudia Juergen (cjuergen)
Assigned to: Nobody/Anonymous (nobody)
Summary: Non authorized users can perform WFStep using back button

Initial Comment:
A user participating in the workflow of an item, might
perform a workflow step he is not authorized to do
simply by using the back button of the browser.

Example

Workflow Step 1 - User1
Workflow Step 2 - User2
Workflow Step 3 - User3

The User1 performs his tasks and accepts an item. If he
pushes the browsers back button and then ok he is
presented with the next workflow step, allthough he is
not member of that group and does not have the
appropriate rights. Hi is able to perform the next
workflow step and so on.




----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=119984&aid=1358131&group_id=19984

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to