snoopdave commented on PR #223:
URL: https://github.com/apache/roller/pull/223#issuecomment-6453917819

   **🤖 GLM: PR-Review — General Issues**
   
   The following issues were found but cannot be attached to a specific line in 
the diff:
   
   - **Important:** CHANGES.md has no entry for this change. Other PRs in the 
6.1.7 batch each carry one. Worth a note: page and resource previews now 
require an enabled user with a role in the weblog being previewed (or a global 
admin) — previously any signed-in editor/admin could preview any weblog.
   
   Strengths (not action items): returning 404 rather than 403 avoids telling 
an unauthorized caller the weblog exists, and the servlet-level placement 
covers both the page and resource preview paths with tests at each.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to