Big security problem

Jul 19, 2012 at 12:10 PM

Hello.

Your webpart is great but there is a big security problem. Anyone can access your settings pages if they now URL address...Hmm...

Thanks

Coordinator
Jul 20, 2012 at 1:45 AM

 

 yes, it's really a issue.

I have modifed the source code, in the PageBase.cs, I added:
protected override Microsoft.SharePoint.SPBasePermissions RightsRequired
        {
            get
            {
                return SPBasePermissions.ManageLists;
            }
        }
this will require that the use must have the ManageLists permission.
you can download the code and build it,
simply, you can just put the dll to GAC.
Coordinator
Nov 30, 2012 at 8:52 AM

this issue has been resolved after version 1.5

Coordinator
Nov 30, 2012 at 8:52 AM

this issue has been resolved after version 1.5