Uploaded image for project: 'phpBB'
  1. phpBB
  2. PHPBB-10377

All moderators can change topic type

XMLWordPrintable

      Moderator is able to construct a URL to change topic type when he does not have permissions to do so.

      Demonstration:
      Set moderator user's "Can make sticky" to Never.
      Browse to viewtopic
      Observe that Make Sticky is not present on Quick Mod Tools
      Choose View Logs from Quick Mod Tools
      edit URL in browser address bar: Tack "&action=make_sticky" to end of URL
      Enter to browse to URL
      Make Sticky confirmation screen appears, and then allows topic to be made sticky.

            igorw Igor Wiedler [X] (Inactive)
            Brf Brf
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: