Itamar O wrote: > If I disable those panels, it will be disabled for for everyone, right?
Yes, correct. > Is it possible to enable / disable panels based on permissions? Not out-of-the-box. However, you could write a small plugin that implements subclasses of the panels you want to restrict, and adds custom permission checks to the relevant methods. Then you could disable the original components and enable your subclasses. > Are there more possible vulnerabilities? I don't know. But you could try to ping osimons on IRC, I'm sure he has more to say about that. -- Remy
signature.asc
Description: OpenPGP digital signature
