Issues

Select view

Select search mode

 

roles attribute of cfcs not being checked

Description

If I call the cfc below from a browser, the remote function runs whether the user is logged in via cflogin or not. If logged in, even if the user is not assigned a role, the function runs.

Environment

Windows 2019, IIS

Details

Assignee

Reporter

Priority

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Affects versions

Created 3 March 2020 at 03:42
Updated 7 February 2023 at 21:41

Activity

Show:

Pothys - MitrahSoft3 March 2020 at 07:38

I've checked and added a test case for this ticket & confirmed the issue happened on Lucee latest version 5.3.6.5 SNAPSHOT also. If we use the roles attribute in cffunction Lucee doesn't check

Pull Request: https://github.com/lucee/Lucee/pull/869

Flag notifications