Skip navigation
RickBullotta
Currently Being Moderated

Security glitch in FileShare pod

Nov 19, 2008 6:53 AM

In the FileShare pod, which logged in as a guest, the upload and save file buttons are correctly disabled, however, double clicking on a file still allows the "guest" user to download it.
 
Replies
  • Currently Being Moderated
    Nov 19, 2008 8:07 AM   in reply to RickBullotta
    Hi Rick,

    As a guest, you are allowed to download the file. You can do this either by double clicking or by selecting the file and clicking on 'Save Selected File'. But you can upload or delete a file only if you have a host or presenter role ( i.e. userole 50 or above)

    FileShare Pod is added in the example LoginDialog.

    Thanks
    Hironmay
     
    |
    Mark as:
  • Currently Being Moderated
    Nov 19, 2008 8:24 AM   in reply to RickBullotta
    Hi Rick,

    The 'Save Selected File' button is enabled only when you select a uploaded file ( be it for user or for host/publisher).
    When you go into a room as a user , it will be disabled by default , but if you single click on any uploaded file and select it, you will see it enabled.

    Thanks
    Hironmay Basu
     
    |
    Mark as:
  • Currently Being Moderated
    Nov 19, 2008 8:50 AM   in reply to RickBullotta
    Hi Rick,

    Yes caching could be one option.
    But here it seems you have autopromote=true turned on for your room. So, any user who comes in as guest is getting autopromoted to presenter role and is getting all controls. You can change this property either through dev console by logging into your room or through programmatically in your application by changing RoomSettings.

    LoginDialog.mxml actually has code that sets autopromote=true and so you are seeing full control when you are going in as guest since you are getting promoted to presenter role.

    Thanks
    Hironmay Basu
     
    |
    Mark as:

More Like This

  • Retrieving data ...

Bookmarked By (0)

Answers + Points = Status

  • 10 points awarded for Correct Answers
  • 5 points awarded for Helpful Answers
  • 10,000+ points
  • 1,001-10,000 points
  • 501-1,000 points
  • 5-500 points