Any user is able to edit attachments
|Reported by:||xknown||Owned by:||anonymous|
Any user that knows the ID of an attachment is able to edit some attributes of it.
Steps to reproduce the problem:
- Log in as an unprivileged user.
- Access directly to the following URL:
- Press "Save Changes" button.
Change History (7)
Note: See TracTickets for help on using tickets.