Ticket #120 (new enhancement) — at Initial Version
Security audit
| Reported by: | dread | Owned by: | dread |
|---|---|---|---|
| Priority: | major | Milestone: | v0.10 |
| Component: | ckan | Keywords: | |
| Cc: | Repository: | ||
| Theme: |
Description
Look for all places where model is accessed and check authorization is checked.
Close up known holes (with tests):
- search i/f
- package WUI commit
Suggestions:
- Search API takes user parameter.
Note: See
TracTickets for help on using
tickets.
