bugphpGroupWare - Bugs: bug #1170, admin authentication and caching...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #1170: admin authentication and caching problems

Submitted by:  None
Submitted on:  Tue 10 Sep 2002 04:04:01 AM UTC  
 
Item Group: 0.9.14 releaseCategory: API - Admin
Severity: 3 - NormalPriority: 5 - Normal
Status: DuplicatePrivacy: Public
Assigned to: NoneOpen/Closed: Closed
Component Version: NoneOperating System: Other
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

Tue 10 Sep 2002 05:35:44 AM UTC, comment #1:

Duplicate, please see Bug #1169:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=1169&group_id=509

Dave Hall <skwashd>
Project Administrator
Tue 10 Sep 2002 04:04:01 AM UTC, original submission:

Logging into either admin/config page or header admin page allows you to authenticate for the other by entering URL directly, without authenticating with the other admin password.

For instance, login to config/setup admin. Then enter the /setup/manageheader.php URL. You're in header admin now without a password.

The opposite is also true. Login to header admin, then enter the URL for config/setup. You are now in the config/setup area with full privs without having entered the config/setup password.

Also, pages are cached. Admin Logout does not really work. You can click Logout in either admin screen, use back button to go to working admin screen, REFRESH, and you are reauthenticated for both admin areas (config/setup and header admin). One reauthenticated you can enter the URL directly for either admin screen with full capabilities in each.

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 3 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Tue 10 Sep 2002 05:35:44 AM UTCskwashdStatusNone=>(Error - Not Found)
  Open/ClosedOpen=>(Error - Not Found)
  Closed on-=>-

Back to the top


Powered by Savane 3.1-cleanup1