Details
-
Bug
-
Resolution: Fixed
-
High
-
5.1, 5.2, 5.3-dev
Description
Package ref: http://packages.ez.no/ezpublish/5.2/5.2.0/ezdemo_site.ezpkg
Added in https://github.com/ezsystems/ezdemo/commit/b76ba26a84f5be7fed8d4689d331a916f70ac6b4
Anonymous user having content/view_embed without limitations will cause embedding of content that it can not read. This includes relation links as well.
The policy should probably be amended to mirror content/read policy.