-
Bug
-
Resolution: Fixed
-
Minor
-
3.0.9
-
None
Moderator is able to construct a URL to change topic type when he does not have permissions to do so.
Demonstration:
Set moderator user's "Can make sticky" to Never.
Browse to viewtopic
Observe that Make Sticky is not present on Quick Mod Tools
Choose View Logs from Quick Mod Tools
edit URL in browser address bar: Tack "&action=make_sticky" to end of URL
Enter to browse to URL
Make Sticky confirmation screen appears, and then allows topic to be made sticky.