8000 Timetable plugin does not appear to check logged in / authorized state · Issue #58 · Gargaj/wuhu · GitHub
[go: up one dir, main page]

Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Timetable plugin does not appear to check logged in / authorized state #58

Open
falken42 opened this issue Nov 14, 2021 · 0 comments
Open

Comments

@falken42
Copy link
Contributor

The Timetable plugin does not appear to properly check the logged in state of a user before displaying the timetable, even when the menu type for the Timetable plugin is set to "Logged in only".

While the top menu does not show a URL link to the Timetable page, anyone with access to the Timetable page URL will be able to view the timetable without logging in. Other pages (such as Voting) properly show an expected UNAUTHORIZED REQUEST! error.

Screen Shot 2021-11-14 at 14 41 11
Screen Shot 2021-11-14 at 14 41 35

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant
0