Bug #313
Feature #36: associate publications with projects
Project search fails to take access permissions into account
| Status: | Closed | Start date: | 2011-09-22 | |
|---|---|---|---|---|
| Priority: | High | Due date: | ||
| Assignee: |  Luis Figueira | % Done: | 0% | |
| Category: | - | |||
| Target version: | - |
Description
When I choose to "add this publication to a project" from the publication details page, and start to type something that matches one or more private projects, I get the names of those private projects showing up in the search results list.
I can tell they're private because when I click on one I get a 403, but they shouldn't be displayed at all.
(In general, shouldn't the link_to_* functions be checking permissions themselves? Perhaps that's too big a philosophical question.)
History
#1
Updated by Luis Figueira about 13 years ago
- Status changed from New to Closed
Solved in ebca856bd627