Opened 17 years ago
Closed 17 years ago
#1033 closed defect (bug) (fixed)
Friends Request Page is accessible publicly
| Reported by: | r-a-y | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | 1.1 |
| Component: | Version: | ||
| Severity: | Keywords: | access, permissions | |
| Cc: |
Description
Tested on testbp.org.
When not logged in, you are able to view the displayed user's friend requests by going directly to the URL:
eg. hxxp://example.com/members/username/friends/requests/
Note:
See TracTickets
for help on using tickets.
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png)
Fixed in r1900. Thanks.