This is a snapshot of Indico's old Trac site. Any information contained herein is most probably outdated. Access our new GitHub site here.

Opened 4 years ago

Closed 4 years ago

Last modified 4 years ago

#738 closed defect (fixed)

Calendar page should not be publicly accessible for protected categories

Reported by: pferreir Owned by: arescope
Priority: critical Milestone: v0.98.1
Component: General Version: 0.98-dev
Keywords: Cc:

Description

i.e. ​https://indico.cern.ch/wcalendar.py?selCateg=1l2

Only people with permission to browse the category should be able to see the calendar.

Change History (5)

comment:1 Changed 4 years ago by arescope

  • Owner set to arescope
  • Status changed from new to assigned

comment:2 Changed 4 years ago by arescope

  • Status changed from assigned to awaiting_merge

comment:3 Changed 4 years ago by jbenito

  • Status changed from awaiting_merge to merging

comment:4 Changed 4 years ago by jbenito

  • Resolution set to fixed
  • Status changed from merging to closed

comment:5 Changed 4 years ago by Alberto Resco Perez <alberto.resco.perez@…>

In [62dbb65102b9e2812ccdf51ad210479663505c63/indico]:

[FIX] Calendar security added

  • The protected categories can not be shown unless the user has access.
  • Closes #738.
Note: See TracTickets for help on using tickets.