View Ticket
Not logged in
Ticket UUID: 09ba8cea6fc21a4b44e426861e72e3ed88040e85
Title: RSS Feed ignores access control
Status: Fixed Type: Code_Defect
Severity: Important Priority:
Subsystem: Resolution: Fixed
Last Modified: 2010-02-05 17:06:25
Version Found In: 49cffc0187
Description & Comments:
I configured a fossil repository for non-public access only (nobody and anonymous have no privileges).

The RSS feed still shows the timeline to unauthenticated users.

Potential fix: If 'anonymous' cannot see the timeline turn RSS off.


drh added on 2010-02-05 17:06:25:
Fixed in check-in [78a6270fdc6ee90ae2edeac25ec94f2004cf6624]