Actions
Bug #503
closedAccess control problem to a replicated doucment
Start date:
05/12/2002
Due date:
% Done:
0%
Estimated time:
Bugzilla-Id:
503
Description
If a document was created by user A in NCEAS metacat. Its permission set owner
has all permission and public has read permission. In morpho, another user B
only can read it.
If this document was replicated to Pine metacat. User B can update it through
morpho even user B only has read permission.
It seemed that metacat have some security hole.
Updated by Jing Tao over 22 years ago
Add a permission control in DocumentImple class for server code not equlas 1 (
this means the document was replicated from another metacat).
Now user B can NOT update the document which was replicated from another
server if user B only has read permission.
Actions