[Registry-dev] [jira] Resolved: (REGISTRY-129) Anonymous users can access to "Add role to user" page

[Chathura Ekanayake (JIRA)]

     [ http://wso2.org/jira/browse/REGISTRY-129?page=all ]

Chathura Ekanayake resolved REGISTRY-129.
-----------------------------------------

    Resolution: Fixed

Now only the authorized users can access "add user to role" feature.

Restricted all actions in the user page based on the permissions of the logged in user.




> Anonymous users can access to "Add role to user" page
> -----------------------------------------------------
>
>                 Key: REGISTRY-129
>                 URL: http://wso2.org/jira/browse/REGISTRY-129
>             Project: WSO2 Registry
>          Issue Type: Bug
>    Affects Versions: SNAPSHOT
>         Environment: Ubuntu 7.10, JDK 1.5.0_08, tomcat 6.0.14, Firefox/2.0.0.8
>            Reporter: Krishantha Samaraweera
>         Assigned To: Chathura Ekanayake
>            Priority: Blocker
>
> anonymous users can access to "Add role to user" page. Since they don't have required privileges better to restrict them to access this page.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira