[
https://jira.nuxeo.org/browse/NXP-2631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jean-Marc Orliaguet closed NXP-2631.
------------------------------------
Resolution: Fixed
access control was implemented in 5.2
if there are still 5.1 instances running in production it would easier to
simply not deploy the theme editor (changes done on themes in that version of
the editor are not taken into account anyway)
> Access to the Nuxeo Theme Editor should be enforced
> ---------------------------------------------------
>
> Key: NXP-2631
> URL: https://jira.nuxeo.org/browse/NXP-2631
> Project: Nuxeo Enterprise Platform
> Issue Type: Bug
> Components: Web UI
> Affects Versions: 5.1.6
> Reporter: Marc-Aurèle Darche
> Assignee: Jean-Marc Orliaguet
> Priority: Major
> Fix For: 5.1.x
>
>
> At the moment, weither there is a link to the NX Theme Editor or not, it's
> possible to enter in it through the accesskeys.
> What should be done is to enforce all the calls to the Theme Editor according
> to roles or permission. A first possible solution would be to simply give
> access only to the Administrator user.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
