[jira] [Resolved] (JSPWIKI-1039) ACLs are not taken into account when cache is disabled

[JIRA]

     [ 
https://issues.apache.org/jira/browse/JSPWIKI-1039?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Juan Pablo Santos Rodríguez resolved JSPWIKI-1039.
--------------------------------------------------
       Resolution: Fixed
    Fix Version/s: 2.10.4

fixed in 2.10.4-git-04, uploading a snapshot now, should be available on ~30 
min.

> ACLs are not taken into account when cache is disabled
> ------------------------------------------------------
>
>                 Key: JSPWIKI-1039
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-1039
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Authentication & Authorization
>    Affects Versions: 2.10.2, 2.10.3
>            Reporter: Harvey Echain
>            Priority: Critical
>             Fix For: 2.10.4
>
>
> Just set jspwiki.usePageCache to false, and find out (by accident) that ACLs 
> are not taken into account anymore, leading to a major leak of information 
> from pages that were not supposed to be viewable.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)