#5703 - backend.php showing all available feeds to Guests
-
By Adam Edington
- Added
- 5 views
| Identifier | #5703 |
|---|---|
| Issue type | Trivial issue (does not break functionality) |
| Title | backend.php showing all available feeds to Guests |
| Status | Completed |
| Tags |
Roadmap: v11 (custom) |
| Handling member | PDStig |
| Version | 10.0.47 |
| Addon | syndication |
| Description | Including admin actions. Pretty sure this isn't intended. |
| Steps to reproduce | |
| Funded? | No |
| Commits |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
backend.php opml mode was publicising all available feeds, even ones guests would not be able to access.
This patch hot-fudges a list of feeds we don't want to promote to guests; they will no longer display in the opml feed.
However in v11, we should add a new method in the RSS hooks for privilege checking (based on current member) and use that instead.
https://gitlab.com/composr-foundation/composr/-/commit/e25cffa0ff26d49d1b48b2a62694a57855563972