Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #8736 Possible information leak with SVN permissions on manually defined group is not explicit enough
    Actions
    Infos
    #8736
    Thomas Gerbet (tgerbet)
    2015-12-30 16:17
    2015-12-30 14:25
    8850
    Details
    Possible information leak with SVN permissions on manually defined group is not explicit enough
    It is not explicit enough that defining SVN permissions on a manually defined group or a specific user could security issues.
    It should be more explicit for an administrator that he must be careful when he edits the SVNAccessFile.
    SCM/Subversion
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2015-12-30
    Attachments
    Artifact links
    Empty
    Empty
    References
    Referencing request #8736

    Artifact Tracker v5

    rel #8596 8.10

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/23/4923/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD d3de1a9012
    User avatar Yannis ROSSETTO (rossettoy) , 2015-12-30 16:13
    request #8736: Add an explicit message concerning possible information leak 61a764d5ed
    User avatar Thomas Gerbet (tgerbet) , 2015-12-30 16:04

    tuleap/u/mildred/tuleap/stable

    Merge commit 'refs/changes/23/4923/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD d3de1a9012
    User avatar Yannis ROSSETTO (rossettoy) , 2015-12-30 16:13
    request #8736: Add an explicit message concerning possible information leak 61a764d5ed
    User avatar Thomas Gerbet (tgerbet) , 2015-12-30 16:04

    Release

    release #115
    Referenced by request #8736

    Other

    gerrit #4923
    Display settings

    Follow-ups

    User avatar
    Yannis ROSSETTO (rossettoy)2015-12-30 16:17
    Merged in Tuleap 8.9.99.58
    • Status changed from Under review to Closed
    • Close date set to 2015-12-30