RecentChanges plugin shows pages, for which the user has no access
------------------------------------------------------------------

                 Key: JSPWIKI-645
                 URL: https://issues.apache.org/jira/browse/JSPWIKI-645
             Project: JSPWiki
          Issue Type: Bug
          Components: Plugins
    Affects Versions: 2.8.3
         Environment: Windows xp, tomcat6
            Reporter: Gergely Kontra


Any user can include the text [{INSERT 
com.ecyrd.jspwiki.plugin.RecentChangesPlugin}] into a page, and see notes of 
page editings (and who and when edited) for those pages, which he/she could not 
even have the right to see.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to