#6084 - cms_comcode_pages not properly checking permissions

By PDStig
Added 21st Dec 2024, 3:12 PM
8 views

Identifier	#6084
Issue type	Minor issue (breaks specific functionality)
Title	cms_comcode_pages not properly checking permissions
Status	Completed
Handling member	PDStig
Version	11 beta5
Addon	actionlog
Description	The cms_comcode_pages module was not properly checking permissions on whether a member can perform the given action. Namely: - It would perform the Comcode page action before checking permissions (bad; permissions should be checked first) - No checking was done at all on if a member is allowed to delete a Comcode page (VERY bad!)
Steps to reproduce
Funded?	No
Commits	Fixed MANTIS-6084 (cms_comcode_pages not properly checking permissions) (636bd0b9) · Commits · Composr ecosystem / Composr · GitLab

The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated

Comments

By Guest posted 21st Dec 2024, 3:12 PM

A hotfix (a TAR of files to upload) has been uploaded to this issue. Only apply this hotfix if you absolutely need it and cannot wait until the next release of Composr (releases are more reliable and strictly tested). As of Composr version 11, the recommended way to apply a hotfix is by following the same steps as an upgrade (https://baseurl/upgrader.php, use the hotfix on the step “Transfer across new/updated files”). The upgrader will automatically skip files belonging to addons you do not have installed or that are newer on disk than in the hotfix. Otherwise, you can manually extract and replace these files (do not replace if your on-disk file is newer than the one in the hotfix). Always take backups of your site or at least files you are replacing before applying a hotfix. Not sure how to extract TAR files to your Windows computer? Try 7-zip (http://www.7-zip.org/).

#6084 - cms_comcode_pages not properly checking permissions

Rating

Comments

Statistics