[GeoNetwork-devel] [GeoNetwork opensource Developer website] #179: Access to thumbnail picture not protected

#179: Access to thumbnail picture not protected
----------------------------------+-----------------------------------------
Reporter: stegherr | Owner: geonetwork-devel@lists.sourceforge.net
     Type: defect | Status: new
Priority: major | Milestone:
Component: User interface (web) | Version: v2.4.1
Keywords: |
----------------------------------+-----------------------------------------
1. I have a data that have restricted access to only one group of people,
for instance Altona 2000 seismic survey,
  1. A thumbnail is associated to that data and as I'm part of the group I
can see a bigger picture by clicking on the thumbnail,
  1. You're not part of the group that has access to the data, but if I
send you the picture address
http://wagcoe.ivec.org/geonetwork/srv/en/graphover.show?id=38&fname=Altona_Survey_800.jpg&access=public
you can see something that is actually protected,
  1. In my opinion only the people part of the Geonetwork group should be
able to see the picture.

--
Ticket URL: <http://trac.osgeo.org/geonetwork/ticket/179&gt;
GeoNetwork opensource Developer website <http://trac.osgeo.org/geonetwork&gt;
GeoNetwork opensource is a standards based, Free and Open Source catalog application to manage spatially referenced resources through the web. It provides powerful metadata editing and search functions as well as an embedded interactive web map viewer. This website contains information related to the development of the software.