Actions
Defect #20469
closedDocument Access
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Documents
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Invalid
Affected version:
Description
Have two projects : Project1, Project2
Member1 assigned to Project1, Member2 assigned to Project2.
Member1 uploaded document, doc1 in one of the issue under Project1
Member2 uploaded document, doc2 in one of the issue under Project2
Member1 able to access doc2 !
https://<application.com>/requests_download/40924
Member2 able to access doc1 !
https://<application.com>/requests_download/40923
Found that anyone can access any document - document added in wiki page, file uploaded in an issue, documents added in "Files" module.
Please let us know how to fix this ?
Actions