Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Permissions issue #462

Closed
4unkur opened this issue May 18, 2017 · 1 comment
Closed

Permissions issue #462

4unkur opened this issue May 18, 2017 · 1 comment
Labels
bug critical discussion
Milestone
4.1.5

Comments

@4unkur
Copy link
Member

4unkur commented May 18, 2017

If you create a usergroup and allow it to see admin panel.
Then member from that usergroup can login to admin panel, navigate to permissions page
and grant all possible permissions himself.

Possible solution: restrict permissions page only for admins.
@4unkur 4unkur added this to the 4.1.5 milestone May 18, 2017
@ghost ghost self-assigned this Jun 21, 2017
ghost pushed a commit that referenced this issue Jun 21, 2017
@jangaraev
#462
94039ae
ghost pushed a commit that referenced this issue Jun 21, 2017
@jangaraev
#462
5d08685
@4unkur
Copy link
Member Author

4unkur commented Jun 21, 2017

I can confirm that issue is resolved. Thanks @Batry

@4unkur 4unkur closed this as completed Jun 21, 2017
vbezruchkin added a commit that referenced this issue Jun 26, 2017
@vbezruchkin
4.1.5 (#474)
5a7be70 
* Changelog corrected.

* #458

* Closes #461

* Category helper: bugfix

* Minor phpdoc comments.

* Modules icons are always displayed in Admin Panel now.

* Minor fixes.

* Youtube improvements.

* processValues now returns item key as well.

* UTF8 encoding for XML.

* Resolves #465

* Security improvements

* Proper escaping.

* Resolves #468

* Escaping on view page.

* Notice for empty cats array.

* Minor improvements for Upload attachment field type

* #471 remove html element after successful file deletion

* #471

* #450

* Fixes #460

* #462

* #462

* Resolves #466

* Necessary for correct version zip.

* #459

* Version changed to 4.1.5

* Compatibility with Google bot.

* #344

* #422

* Changelog updated

* Resolves #354

* Resolves #282
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug critical discussion
Projects
None yet
Milestone
4.1.5
Development

No branches or pull requests
1 participant
@4unkur