DO NOT REPLY [Bug 14907] New: - Any non-admin user can add/delete portlets to other users

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14907>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14907

Any non-admin user can add/delete portlets to other users

           Summary: Any non-admin user can add/delete portlets to other
                    users
           Product: Jetspeed
           Version: 1.4b2-dev / CVS
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Customizer
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


1)Log in as a non-admin user.
2)View another users page by changing the URL to their user name.
3)Select the customizer icon on one of their tabs.
4)Edit away

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>