[ 
http://jira.magnolia.info/browse/MAGNOLIA-2020?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jan Haderka updated MAGNOLIA-2020:
----------------------------------

    Summary: activation: /ActivationHandler should be  /.magnolia/activation or 
similra  (was: acticaion: /ActivationHandler should be  /.magnolia/activation 
or similra)

> activation: /ActivationHandler should be  /.magnolia/activation or similra
> --------------------------------------------------------------------------
>
>                 Key: MAGNOLIA-2020
>                 URL: http://jira.magnolia.info/browse/MAGNOLIA-2020
>             Project: Magnolia
>          Issue Type: Improvement
>          Components: activation
>    Affects Versions: 3.5.3
>            Reporter: Philipp Bracher
>            Assignee: Philipp Bracher
>             Fix For: 3.5.4
>
>
> by default all urls under .magnolia are protected by the anonymous role. So 
> it makes sense to move the activation filter under this path.
> Note: this is not a security issue as such as the execution under 3.5 uses 
> normal ACLs for writing or deleting

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.magnolia.info/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/docs/en/editor/stayupdated.html
----------------------------------------------------------------

Reply via email to