Loading...
 
Features / Usability

Features / Usability


Locked Pages displayed in search result

posts: 12

Locked pages (no view permission to anonymous) are returned if an anonymous users searches for appropriate terms. Especially, the preview of the page is not intended.

Is this a bug or can this behavior be configured?

posts: 1001 Canada

It can't be configured, it's rather a bug, more or less.
It's among the long-standing known big problems in Tiki. Custom permissions on objects aren't checked in listings, like in last_* modules, etc.

Note that "Locked Pages" would refer to pages that can't be edited.


posts: 2881 United Kingdom

The search has a known security issue, by displaying snippets of permissioned pages to anonymous.

Disable search if you worry about it.

damian


Upcoming Events

1)  18 Apr 2024 14:00 GMT-0000
Tiki Roundtable Meeting
2)  16 May 2024 14:00 GMT-0000
Tiki Roundtable Meeting
3)  20 Jun 2024 14:00 GMT-0000
Tiki Roundtable Meeting
4)  18 Jul 2024 14:00 GMT-0000
Tiki Roundtable Meeting
5)  15 Aug 2024 14:00 GMT-0000
Tiki Roundtable Meeting
6)  19 Sep 2024 14:00 GMT-0000
Tiki Roundtable Meeting
7) 
Tiki birthday
8)  17 Oct 2024 14:00 GMT-0000
Tiki Roundtable Meeting
9)  21 Nov 2024 14:00 GMT-0000
Tiki Roundtable Meeting
10)  19 Dec 2024 14:00 GMT-0000
Tiki Roundtable Meeting