Feeling Lucky
?
[#4334] - Restricted Blog/Single Category
- Expected Behaviour
- 24 Sep 2014
- Medium
- Build: master
- # 4334
Steps to reproduce the issue
Menù item: Blog/Category List Public access
Category with restricted access
Expected result
Messagge like "You do not have sufficient access rights"
Actual result
404 Page
System information (as much as possible)
joomla 2.5.25
Additional comments
With no rights i expect to read a message with no rights. When i'm logged in, blog or category list works fine.
brianteeman
- 
zero-24
- | Status | New | ⇒ | Expected Behaviour |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2014-09-24 21:39:04 |
| Category | Front End | ⇒ | ACL Front End |
| Labels |
Added:
?
|
||
This is how the JCategories class works. Users only see the categories which are available for their specific user level. If the category is not available for the user, then he gets the error message #404 Category not found. This is the correct way to handle it to restrict broadcast requests which can reveal sensitive information to the sender.
IMHO we should not change the way how it is handled now. The administrator should take care and restrict the menu entry properly!
This comment was created with the J!Tracker Application at http://issues.joomla.org/.