Opened 14 years ago

Last modified 12 years ago

#179 new defect

Access to thumbnail picture not protected

Reported by: stegherr Owned by: geonetwork-devel@…
Priority: major Milestone: v2.6.5
Component: User interface (web) Version:
Keywords: Cc: Soazig.Corbel@…

Description

  1. I have a data that have restricted access to only one group of people, for instance Altona 2000 seismic survey,
  2. A thumbnail is associated to that data and as I'm part of the group I can see a bigger picture by clicking on the thumbnail,
  3. You're not part of the group that has access to the data, but if I send you the picture address http://wagcoe.ivec.org/geonetwork/srv/en/graphover.show?id=38&fname=Altona_Survey_800.jpg&access=public you can see something that is actually protected,
  4. In my opinion only the people part of the Geonetwork group should be able to see the picture.

Change History (1)

comment:1 by ianwallen, 12 years ago

Milestone: v2.6.5
Version: v2.4.1
Note: See TracTickets for help on using tickets.