Check view permissions in viewtasks.json.php

Bug #771637 reported by Richard Mansfield
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Fix Released
High
Richard Mansfield
1.3
Fix Released
High
Richard Mansfield

Bug Description

This script is for task pagination when viewing a plans block or plan artefact within the context of a View, but needs to check that the user is allowed to see the View.

CVE References

Revision history for this message
Richard Mansfield (richard-mansfield) wrote :
Revision history for this message
Ruslan Kabalin (rkabalin) wrote :

The patch looks good to me

visibility: private → public
Changed in mahara:
status: In Progress → Fix Committed
Changed in mahara:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.