Ticket #120 (new enhancement) — at Initial Version
Security audit
Reported by: | dread | Owned by: | dread |
---|---|---|---|
Priority: | major | Milestone: | v0.10 |
Component: | ckan | Keywords: | |
Cc: | Repository: | ||
Theme: |
Description
Look for all places where model is accessed and check authorization is checked.
Close up known holes (with tests):
- search i/f
- package WUI commit
Suggestions:
- Search API takes user parameter.
Note: See
TracTickets for help on using
tickets.