Package: moinmoin-common
Version: 1.3.4-3
Severity: important

I use moinmoin as a CMS for a website. As such, I have certain pages
with ACLs attached, so that they are not visible; e.g.

#acl AuthorsName:read.write,revert All:

Typcially I have a sub-page included to another page to pull in a link
to these. This works well, so no-one can see my new page
TopSecretNewContract, or access it directly via an URL.

However RecentChanges lists the new pages, and comments, and who is
working on them, thus leaking information.

-- System Information:
Debian Release: 3.1
Architecture: powerpc (ppc)
Kernel: Linux 2.6.8-powerpc
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to