mugle-dev team mailing list archive

[Matt Giuca <786594@xxxxxxxxxxxxxxxxxx>]

** Changed in: mugle
       Status: Triaged => In Progress

** Changed in: mugle
     Assignee: (unassigned) => Matt Giuca (mgiuca)

-- 
You received this bug notification because you are a member of MUGLE
Developers, which is a direct subscriber.
https://bugs.launchpad.net/bugs/786594

Title:
  Upload service does not check permissions

Status in Melbourne University Game-based Learning Environment:
  In Progress

Bug description:
  A pretty glaring security bug that I don't have the time or expertise
  to fix at this stage. Currently, anybody can upload a file over the
  top of anybody else's game. This is fairly critical (I need to learn
  how to check permissions, or someone else needs to do it).