|
| Summary: |
Non viewable likers are not correctly displayed |
| Issue Type: |
Bug |
| Affects Versions: |
12.10.11, 13.4.4, 13.9-rc-1 |
| Assignee: |
Unassigned |
| Attachments: |
image-2026-02-06-10-30-54-333.png |
| Components: |
Like |
| Created: |
06/Feb/26 10:30 |
| Priority: |
Major |
| Reporter: |
Manuel Leduc |
| Description: |
Caused by XWIKI-16544 Reproduction steps
- Have 2 users U1 and U2 like a page X
- With an admin, disable the view right of U1 by U2
- With user U2 visit the list of likers of page X (e.g., http://localhost:8080/xwiki/bin/view/Main/?viewer=likers)
Expected Only U2 is listed, and U1 is filtered out. Actual An entry is displayed for U1 with a bad display (so it does not leak undesired information). |
|