1

Resolved

Security is ignored

description

Teh tagcloud and tagbrowser display items that are actually not allowed for the user.

comments

decamps wrote Apr 26, 2010 at 9:53 AM

That's because the cache is not user dependant.

When the first user displays the tagcloud, the cloud is generated with his credentials, stored in cache. The following users have the cached cloud, and their credentials are not talken into account.

decamps wrote Apr 26, 2010 at 9:55 AM

  • the cloud is now the list of tags (and their weight). This is small enough to be cache for every user
  • the items are not cached any more; their are search with the SSP search engine

wrote Apr 26, 2010 at 10:18 AM

wrote Feb 13, 2013 at 9:33 PM

wrote May 16, 2013 at 2:32 AM

wrote May 16, 2013 at 2:32 AM

wrote Jun 14, 2013 at 7:25 AM