bugphpGroupWare - Bugs: bug #1169, admin authentication and caching...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #1169: admin authentication and caching problems

Submitted by:  None
Submitted on:  Tue 10 Sep 2002 04:03:47 AM UTC  
 
Item Group: 0.9.14 releaseCategory: API - Setup
Severity: 4 - ImportantPriority: 7 - High
Status: NonePrivacy: Public
Assigned to: Dave Hall <skwashd>Open/Closed: Closed
Component Version: NoneOperating System: Other
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

Thu 20 Mar 2003 05:00:06 AM UTC, comment #2:

I have some people currently testing a fix for this. The caching issue can't be avoided as this is a web app.

Dave Hall <skwashd>
Project AdministratorIn charge of this item.
Wed 11 Sep 2002 12:00:27 AM UTC, comment #1:

It appears to me that some of these issues are duplicated in bug 1171, see: https://savannah.gnu.org/bugs/?func=detailbug&bug_id=1171&group_id=509

Dave Hall <skwashd>
Project AdministratorIn charge of this item.
Tue 10 Sep 2002 04:03:47 AM UTC, original submission:

Logging into either admin/config page or header admin page allows you to authenticate for the other by entering URL directly, without authenticating with the other admin password.

For instance, login to config/setup admin. Then enter the /setup/manageheader.php URL. You're in header admin now without a password.

The opposite is also true. Login to header admin, then enter the URL for config/setup. You are now in the config/setup area with full privs without having entered the config/setup password.

Also, pages are cached. Admin Logout does not really work. You can click Logout in either admin screen, use back button to go to working admin screen, REFRESH, and you are reauthenticated for both admin areas (config/setup and header admin). One reauthenticated you can enter the URL directly for either admin screen with full capabilities in each.

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 6 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Thu 20 Mar 2003 05:00:06 AM UTCskwashdAssigned toseek3r=>NA
  Open/ClosedOpen=>(Error - Not Found)
Tue 26 Nov 2002 09:16:21 AM UTCskwashdSeverity3 - Normal=>(Error - Not Found)
  Priority210(Error - Not Found)=>(Error - Not Found)
Wed 11 Sep 2002 12:00:27 AM UTCskwashdCategoryAPI - Admin=>(Error - Not Found)
  Assigned toNone=>NA

Back to the top


Powered by Savane 3.1-cleanup1