Uploaded image for project: 'atna-questionnaire'
  1. atna-questionnaire
  2. QUEST-74

Missing protection on ATNA Questionnaire edition and view

    Details

    • Type: Bug
    • Status: Closed
    • Priority: High
    • Resolution: Fixed
    • Affects Version/s: 2.2.0
    • Fix Version/s: 2.3.0
    • Labels:
      None
    • Sprint:
      2017 - S12
    • Account:
      Maintenance 2017 (MAINTENANCE2017)

      Description

      URLs gss/questionnaire/editor.seam?id=46 and gss/questionnaire/viewer.seam?id=46 are not filtered by owner. Any logged in user can access ATNA Questionnaire from other company using those direct URL if he/she gets the right database id.

        BigPicture - Work Breakdown Structure

          Attachments

            Activity

              People

              Assignee:
              ceoche Cédric EOCHE-DUVAL
              Reporter:
              ceoche Cédric EOCHE-DUVAL
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                BigPicture - Skills

                  Dates

                  Created:
                  Updated:
                  Resolved:

                    Time Tracking

                    Estimated:
                    Original Estimate - 4 hours Original Estimate - 4 hours
                    4h
                    Remaining:
                    Remaining Estimate - 0 minutes
                    0m
                    Logged:
                    Time Spent - 4 hours, 30 minutes
                    4h 30m

                      Potential Duplicates