Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
Anonymous user can see list of packages and containers
-
Not sure if this is intended, but I thought I would report it.
An anonymous user (or a user with no permissions) can click on the "Packages", "Assets" and "Containers" links at the top of the ProGet homepage and see a listing of the respective items.
I would assume that a user that did not have view feed permissions would not be able to view a list of the packages and which feeds they are in.
-
@Stephen-Schaff thanks for the bug report, I verified that this may happen depending on permission of user, and which feeds they can/can't use --- but it seems an easy enough fix that we can do via PG-1894 (targeted to next release) - the packages can't be viewed upon clicking, but it's a sub-optimal experience for showing packages they can't see
