[mashup-dev] [jira] Commented: (MASHUP-634) Anonymous user is able to add things to the home page.

[Tyrell Perera (JIRA)]

    [ http://wso2.org/jira/browse/MASHUP-634?page=comments#action_15400 ] 
            
Tyrell Perera commented on MASHUP-634:
--------------------------------------

I noticed a similar issue while working on the registry. I reported it in their jira. I think it's a session management bug in the registry.

Ref: REGISTRY-209	A rating done after session timeout gets stored as done by user 'Anonymous'

https://wso2.org/jira/browse/REGISTRY-209

> Anonymous user is able to add things to the home page.
> ------------------------------------------------------
>
>                 Key: MASHUP-634
>                 URL: http://wso2.org/jira/browse/MASHUP-634
>             Project: WSO2 Mashup Server
>          Issue Type: Bug
>    Affects Versions: 1.0
>         Environment: mooshup.com
>            Reporter: Jonathan Marsh
>         Assigned To: Jonathan Marsh
>
> Somebody was able to add a query to the anonymous home page.  Need to prevent this!  I think it's in the ajaz

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira