Project

General

Profile

Bug #2717

cvsData user can see stuff when ftping with the wrong url

Added by Michael Lee almost 14 years ago. Updated about 13 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
misc
Target version:
Start date:
01/11/2007
Due date:
% Done:

0%

Estimated time:
Bugzilla-Id:
2717

Description

The cvsdata user can see too many files when ftping over the wrong URL (see Bob or Michael for what the URL is)

When you FTP in, via Firefox or WinExplorer, you can view all the folders, then files, and download them too. Seems that cvsdata user has read permissions in folders where they shouldn't have them.

Bob is looking into finding someone to deal with this.

History

#1 Updated by Michael Lee almost 14 years ago

This is the user in the BIOLOGY domain. I wasn't clear about that before.

#2 Updated by Michael Lee about 13 years ago

Hinar has been emailed. This is somewhat important as I post user's data for them to download a new copy of the entry tool with last year's data prepopulated. Ideally, this information is confidential.

#3 Updated by Michael Lee about 13 years ago

Hinar has rearranged the files on our server and now EEP_Projects is housed in \\bioweb\EEP_Projects. This is blocked off from FTP access for the cvsdata user.

I still emailed Hinar to allow access via http://cvs.bio.unc.edu/EEP_projects instead of http://www.bio.unc.edu/faculty/peet/lab/cvs/EEP_projects

This is a minor issue, but would be nice to have.

#4 Updated by Redmine Admin over 7 years ago

Original Bugzilla ID was 2717

Also available in: Atom PDF