Opened 15 years ago
Closed 15 years ago
#1033 closed defect (bug) (fixed)
Friends Request Page is accessible publicly
Reported by: | r-a-y | Owned by: | |
---|---|---|---|
Milestone: | 1.1 | Priority: | major |
Severity: | Version: | ||
Component: | Keywords: | access, permissions | |
Cc: |
Description
Tested on testbp.org.
When not logged in, you are able to view the displayed user's friend requests by going directly to the URL:
eg. hxxp://example.com/members/username/friends/requests/
Change History (2)
Note: See
TracTickets for help on using
tickets.
Fixed in r1900. Thanks.