Loading...

XML

Word

Printable

Type: Bug
Resolution: Fixed
Priority: Low
Component/s: moodle.org/plugins
Labels:
- triaged

On moodle.org Plugins ► My sites ► Reports ► My sites by manuplating url param (id) you can delete anyones "My site" information

Example the following information doesn't belong to me but I can delete it.

https://moodle.org/plugins/report/user_sites/site.php?id=803&action=delete

is a regression caused by

MDLSITE-2108 implement plugins DB one-click install process and user's moodle sites register.

Closed

Assignee:: David Mudrák (@mudrd8mz)

Reporter:: Rajesh Taneja

Participants:: David Mudrák (@mudrd8mz), Helen Foster, Rajesh Taneja

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 27/May/15 11:37 PM

Updated:: 14/Jul/21 5:38 PM

Resolved:: 29/May/15 6:45 AM