You are not logged in.
Hi everyone
I've just updated GLPI to 9.5.1 (plus out-of-version mailcollector.class.php).
The issue is everyone can see any article in knowledge base search results, disregarding the permissions set ("Targets"). Articles in search results not filtered. If I search for article that I not allowed to read, I can read a part of that article in search results.
However, I cannot open an article itself (access denied), as expected.
Is it misconfiguration of update problem? Otherwise it should be classified as security issue. Maybe I should create aan issue on github?
Illustrating image: imgur.com/a/r9aIH43
Offline