Bug: Rdiff Ignores Web Permissions

Rdiff ignores permissions. I'm not so sure how much better I can describe the bug. It has been tested by myself and confirmed on seperate twiki systems. We fixed this locally by adding in the permission checking code from 'view'.

Test case

Enter into a search, select all searchable webs. When the web results return, click on the date links under 'Changed' and it'll load the change diffs for any web in the return results regardless of view/change permissions.

Environment

-- JessieBrickner - 31 Jan 2003

Follow up

Fix record

Thanks for reporting, is in TWikiAlphaRelease and at TWiki.org.

-- PeterThoeny - 01 Feb 2003