Bug: search results may return hidden module content
Reported by dleffler | August 8th, 2013 @ 05:01 PM | in 2.2.2 (closed)
When we activated the code to allow 'hidden' modules (can only be seen if user has a 'view' perm for that page), we didn't include that check in the search model getSearchResults() method.
Comments and changes to this ticket
-
expNinja August 9th, 2013 @ 01:19 AM
- State changed from “new” to “resolved”
(from [0d5c1933f5735790020343628faad6acf0da9cc7]) Enhances search results by 1) doing better job of eliminating hits which current user has no permission to view esp. in regards to hidden modules, 2) adds a 'word match only' setting to the search/show config settings, 3) display search hit result 'score' for admin users, and 4) more accurate highlighting when using search modifiers +-* [#1070 state:resolved] [#433} https://github.com/exponentcms/exponent-cms/commit/0d5c1933f5735790...
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Bug Tracker for Exponent CMS
expNinja