You are here: Foswiki>Tasks Web>Item11433 (24 Feb 2012, MichaelDaum)Edit Attach

Item11433: use TopicTitle property as a link text only when permitted by view rights

Priority: Normal
Current State: Closed
Released In: n/a
Target Release: n/a

Applies To: Extension
Component: BreadCrumbsPlugin, DBCachePlugin, NatSkinPlugin
Branches: trunk

Reported By: AndreLichtsteiner
Waiting For:
Last Change By: MichaelDaum

DBCachePlugin introduces the functionality of TopicTitle. Topic links get automatically expanded to the TopicTitle of the linked topic.

TopicTitle is stored in the topic either with

    * Set TOPICTITLE = Nice title of this topic

or in formfield called TopicTitle.

Now, the problem is, that links get replaced with their TopicTitle even if the user has no view right on the respective topic. We consider this to be a information leak.

-- AndreLichtsteiner - 11 Jan 2012

Implemented as a {SecureTopicTitles} configure flag.

-- MichaelDaum - 11 Jan 2012

-- MichaelDaum - 24 Feb 2012

ItemTemplate edit

Summary	use TopicTitle property as a link text only when permitted by view rights
ReportedBy	AndreLichtsteiner
Codebase
SVN Range
AppliesTo	Extension
Component	BreadCrumbsPlugin, DBCachePlugin, NatSkinPlugin
Priority	Normal
CurrentState	Closed
WaitingFor
Checkins	DBCachePlugin:9e75a3f37f67 BreadCrumbsPlugin:209734f79bd8 NatSkinPlugin:46af2136fac3 BreadCrumbsPlugin:936f12e234fb
TargetRelease	n/a
ReleasedIn	n/a
CheckinsOnBranches	trunk
trunkCheckins	DBCachePlugin:9e75a3f37f67 BreadCrumbsPlugin:209734f79bd8 NatSkinPlugin:46af2136fac3 BreadCrumbsPlugin:936f12e234fb
Release01x01Checkins