#1070 Bug: search results may return hidden module content - Exponent CMS

Type	To find
responsible:me	tickets assigned to you
tagged:"@high"	tickets tagged @high
milestone:next	tickets in the upcoming milestone
state:invalid	tickets with the state invalid
created:"last week"	tickets created last week
sort:number, importance, updated	tickets sorted by #, importance or updated
Combine keywords for powerful searching.
Use advanced searching »

#1070 ✓resolved

Bug: search results may return hidden module content

Reported by dleffler | August 8th, 2013 @ 05:01 PM | in 2.2.2 (closed)

When we activated the code to allow 'hidden' modules (can only be seen if user has a 'view' perm for that page), we didn't include that check in the search model getSearchResults() method.

Comments and changes to this ticket

expNinja August 9th, 2013 @ 01:19 AM
- State changed from “new” to “resolved”
(from [0d5c1933f5735790020343628faad6acf0da9cc7]) Enhances search results by 1) doing better job of eliminating hits which current user has no permission to view esp. in regards to hidden modules, 2) adds a 'word match only' setting to the search/show config settings, 3) display search hit result 'score' for admin users, and 4) more accurate highlighting when using search modifiers +-* [#1070 state:resolved] [#433} https://github.com/exponentcms/exponent-cms/commit/0d5c1933f5735790...

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.