<?xml version="1.0"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>CKAN: Ticket #2968: Anyone can access organization members page</title>
    <link>http://localhost/ticket/2968</link>
    <description>&lt;p&gt;
The button will not show if you are not authorized but browse to /organization/members/foo and you can edit the members, it does stop you when you try to save your changes, but you shouldn't be able to get to the page at all
&lt;/p&gt;
</description>
    <language>en-us</language>
    <image>
      <title>CKAN</title>
      <url>http://assets.okfn.org/p/ckan/img/ckan_logo_shortname.png</url>
      <link>http://localhost/ticket/2968</link>
    </image>
    <generator>Trac 0.12.3</generator>
    <item>
      
        <dc:creator>seanh</dc:creator>

      <pubDate>Mon, 15 Oct 2012 10:31:10 GMT</pubDate>
      <title></title>
      <link>http://localhost/ticket/2968#comment:1</link>
      <guid isPermaLink="false">http://localhost/ticket/2968#comment:1</guid>
      <description>
        &lt;p&gt;
This also applies to other pages such as /member_new and /member_delete
&lt;/p&gt;
      </description>
      <category>Ticket</category>
    </item>
 </channel>
</rss>