Actions
Feature #4186
closed
Tvheadend log expose data to non-admin users
Start date:
2017-01-16
Due date:
% Done:
100%
Estimated time:
Description
Steps for issue re-creation when logged in as admin:
1. Create non-admin user
2. Allow "Web interface" feature for non-admin user
3. Log in to web interface as non-admin user and go to Tvheadend log
4. Observe that all activity and data (IP, Usernames, Mux names..) of admin or any other user is exposed to non-admin user in Tvheadend log!
Tvheadend log should not show and should not be allowed/enabled/visible for non-admin users.
Updated by
Actions