Uploaded image for project: 'atna-questionnaire'
  1. atna-questionnaire
  2. QUEST-74

Missing protection on ATNA Questionnaire edition and view

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.2.0
    • Fix Version/s: 2.3.0
    • Labels:
      None
    • Account:
      Maintenance 2017 (MAINTENANCE2017)

      Description

      URLs gss/questionnaire/editor.seam?id=46 and gss/questionnaire/viewer.seam?id=46 are not filtered by owner. Any logged in user can access ATNA Questionnaire from other company using those direct URL if he/she gets the right database id.

        Attachments

          Activity

            People

            • Assignee:
              ceoche Cédric EOCHE-DUVAL
              Reporter:
              ceoche Cédric EOCHE-DUVAL
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 4 hours Original Estimate - 4 hours
                4h
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 4 hours, 30 minutes
                4h 30m

                  Potential Duplicates