Looking here - http://www.satchmoproject.com/trac/browser/satchmo/trunk/satchmo/apps/livesettings/views.py
The settings view is supposed to require that the user be a staff member to see it. So, it should be secure but if it is not working for some reason, please let us know. -Chris On Sun, Apr 5, 2009 at 10:32 AM, Ned <[email protected]> wrote: > > If I"m correct that there is no permission control for Settings, this > is a security loophole and I think I should file a ticket. > > Can anyone either confirm I'm correct or show me how Settings can be > protected from the unauthorized? > > Ned > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Satchmo users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/satchmo-users?hl=en -~----------~----~----~----~------~----~------~--~---
