[Geoserver-devel] [jira] (GEOS-5495) User with administrative rights on a workspace can modify other workspaces

Tue, 11 Dec 2012 08:41:11 -0800

Issue Type: Bug Bug
Affects Versions: 2.2.2
Assignee: Andrea Aime
Components: Security
Created: 11/Dec/12 10:40 AM
Description:

with a layer.properties containing :

..r=*
topp.*.a=ROLE_AUTHENTICATED

a logged in user only sees layers from the topp workspace, as expected.

BUT it can also see/modify other workspaces, create/remove datastores/styles from other workspaces. This shouldnt happen.

It cant add/remove workspaces.
Environment: Debian Squeeze
Project: GeoServer
Priority: Major Major
Reporter: Landry Breuil
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira 
------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to