Description

When a user tries to read a page and if the page does not exist, MoinMoin shows the content of the Missing Page. However, it does not check the read permission of the MissingPage.

Steps to reproduce

1. Add ACL to MissingPage or MissingHomePage 2. Enter a url with non-existing page.

Example

Component selection

Details

MoinMoin Version

1.8.x

OS and Version

Any

Python Version

Any

Server Setup

Any

Server Details

Any

Language you are using the wiki in (set in the browser/UserPreferences)

Any

Workaround

Discussion

The fix would be adding permission check in _emptyPageText function of Page.py file.

Plan


CategoryMoinMoinBug

MoinMoin: MoinMoinBugs/1.8MissingPageReadPermissionNotChecked (last edited 2010-02-17 21:45:53 by nacho)