User authentication at page level

ristincr · Post by **ristincr** » Fri Oct 07, 2005 4:32 pm

I found that a non-Admin user was able to access the Database options page:

https://.../Dragnet/ListDatabaseOpts.aspx

It seems that Dragnet is not authenticating users for each page. Given the url for a hidden button, a user can actually access it?

lbauer · Post by **lbauer** » Sat Oct 08, 2005 11:45 am

Thanks, I've logged this as a bug. A non-admin user can't change anything on the Admin pages, but they shouldn't be seeing them.