On 12/12/05, Peter Hartmann <[EMAIL PROTECTED]> wrote:
> Correction:  If the "view" checkbox is checked the user can edit.   See here:
>
> http://calendar.ascensionschoolnyc.org:8963/persons/test
>
> Again the "edit" checkbox is NOT checked to unauthenticated users.

I think this is a user interface bug, not a security bug.  That is,
when you actually submit the form to change the password, then you'll
be asked for the password, correct?

--Tom
_______________________________________________
Schooltool mailing list
[email protected]
http://lists.schooltool.org/mailman/listinfo/schooltool

Reply via email to