[SECURITY] Custom fields visible to users if added to server lists [#25307]

Submitted by jasongayson on Thu, 02/07/2013 - 21:30

Custom fields that are set to "only visible to master admin" are visible to regular server-admins in their server lists, basically ticking the "show as column in server list" option bypasses the security check of who can see the field data.

Status:

Closed (fixed)

Comments

Submitted by JamieCameron on Thu, 02/07/2013 - 21:51 Comment #1

Thanks - this will be fixed in the next release.

Submitted by Issues on Thu, 02/21/2013 - 22:02 Comment #2

Automatically closed -- issue fixed for 2 weeks with no activity.