Details
-
Bug
-
Resolution: Not a bug
-
Medium
-
None
-
2.5.6
-
None
-
System Information
System Date Tuesday, 11 Sep 2007
System Time 16:00:04
System Favourite Colour Myrtle
Java Version 1.6.0_02
Java Vendor Sun Microsystems Inc.
JVM Version 1.0
JVM Vendor Sun Microsystems Inc.
JVM Implementation Version 1.6.0_02-b05
Java Runtime Java(TM) SE Runtime Environment
Java VM Java HotSpot(TM) Client VM
User Name confluence
User Timezone Europe/Paris
Operating System Linux 2.6.17.4dedibox_r5
OS Architecture i386
Filesystem Encoding ANSI_X3.4-1968Java VM Memory Statistics
Total Memory 208 MB
Free Memory 97 MB
Used Memory 111 MB
Memory Graph
[Used Memory (53 %)] [Free Memory (47 %)]
47 % FreeRuntime Information
Database Dialect net.sf.hibernate.dialect.PostgreSQLDialect
Database Connection URL jdbc:postgresql://localhost:5432/confluence
Database Driver Name org.postgresql.Driver
Database Driver Version 8.1
Application Server Apache Tomcat/5.5.15
Servlet Version 2.4
Confluence Home /var/opt/confluence
Uptime 21 days, 1 hour, 27 minutes, 48 seconds
Confluence Version 2.5.6
Build Number 812System Information System Date Tuesday, 11 Sep 2007 System Time 16:00:04 System Favourite Colour Myrtle Java Version 1.6.0_02 Java Vendor Sun Microsystems Inc. JVM Version 1.0 JVM Vendor Sun Microsystems Inc. JVM Implementation Version 1.6.0_02-b05 Java Runtime Java(TM) SE Runtime Environment Java VM Java HotSpot(TM) Client VM User Name confluence User Timezone Europe/Paris Operating System Linux 2.6.17.4dedibox_r5 OS Architecture i386 Filesystem Encoding ANSI_X3.4-1968 Java VM Memory Statistics Total Memory 208 MB Free Memory 97 MB Used Memory 111 MB Memory Graph [Used Memory (53 %)] [Free Memory (47 %)] 47 % Free Runtime Information Database Dialect net.sf.hibernate.dialect.PostgreSQLDialect Database Connection URL jdbc:postgresql://localhost:5432/confluence Database Driver Name org.postgresql.Driver Database Driver Version 8.1 Application Server Apache Tomcat/5.5.15 Servlet Version 2.4 Confluence Home /var/opt/confluence Uptime 21 days, 1 hour, 27 minutes, 48 seconds Confluence Version 2.5.6 Build Number 812
Description
Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard.
This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki.
Note: this problem as been reported previously in a comment here on CONF-7837.
Attachments
Issue Links
- is related to
-
-
- Closed
-
- relates to
-
CONFSERVER-1134 Permissions for user profiles
- Closed
