mugle-dev team mailing list archive

[Matt Giuca <786594@xxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

A pretty glaring security bug that I don't have the time or expertise to
fix at this stage. Currently, anybody can upload a file over the top of
anybody else's game. This is fairly critical (I need to learn how to
check permissions, or someone else needs to do it).

** Affects: mugle
     Importance: Critical
         Status: Triaged


** Tags: security

-- 
You received this bug notification because you are a member of MUGLE
Developers, which is a direct subscriber.
https://bugs.launchpad.net/bugs/786594

Title:
  Upload service does not check permissions

Status in Melbourne University Game-based Learning Environment:
  Triaged

Bug description:
  A pretty glaring security bug that I don't have the time or expertise
  to fix at this stage. Currently, anybody can upload a file over the
  top of anybody else's game. This is fairly critical (I need to learn
  how to check permissions, or someone else needs to do it).