-
Bug
-
Resolution: Done
-
Critical
-
6.x.x
-
-
-
-
-
-
ER5
-
It has been identified a critical security issue in business-central. It is possible to access data from a specific HT by using a direct URL and an user who is not a potential owner or business administrator:
- is cloned by
-
RHBPMS-4576 [GSS](6.4.z) A user can display tasks for which he is not PotOwner or BussinesAdm in BPM Suite 6.4
- Verified
-
JBPM-7247 A user can display tasks for which he is not PotOwner or BussinesAdmin (Code cleanup)
- Resolved