Products

Evoq Content Overview Content Creation Workflow Asset Management Mobile Responsive Personalization Content Analytics SEO Integrations Security Website PerformanceEvoq Engage Overview Community Management  Dashboard  Analytics  Member Profile Gamification Advocate Marketing Community Engagement  Ideas  Answers  Discussions  Groups  Wikis  Events Mobile ReadyDNN Support PackagesEvoq: CMS FeaturesEvoq OnDemandCompare DNN's CMS Products

Solutions

Content Management SystemMulti-Channel PublishingDigital MarketingOnline Community ManagementIntranet Software SolutionOur CustomersPrime

Resources

Test DrivesSchedule A DemoDocumentation CenterWebinarsWhite PapersProduct ManualsRequest PricingData SheetsCase StudiesEvoq Preferred Products Content Management Ecommerce Forms Identity Management and Authentication Site Management Social Themes

Partners

DNN Partners Partner Directory Become a DNN Partner Partner Program Overview  Hosting  Implementation  ISV  Training  Competencies

Community

Participate Ask a Question Forums Community Showcase DNN MVP  Program Overview  Lifetime MVPs  Honorary MVPs Subscribe to DNN Digest Advisory Groups  Awareness Advisory Group  Developer Advisory Group  Partner Advisory Group  Technology Advisory GroupLearn Documentation Wiki Community Blog Video Library Project History Development RoadmapDownload DNN Store Language Packs Manuals Nightly BuildsSecurity Policies Security Center

Blog

About

News Press Releases News Coverage Press KitCareersContact DNN

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Major Security problem reported AGES ago, still in 5.6.2Major Security problem reported AGES ago, still in 5.6.2
Previous
 
Next
New Post
4/10/2011 5:54 AM
 
Costas Zividis


Joined: 10/29/2010
Posts: 546
Hello.

This has been reported a long time ago and verified as a bug.

ALL users have ADMIN access in their USER PROFILE (module Settings). Because they have EDIT access in the module. We have to DISABLE that again, totally.

This is still so in 5.6.2 "stabilization" release. Not very stabilized in my book. Apparently this is not going to be fixed and since version 6 will not be an option for a long time, we will live with this ...

Thanks



Discover Venice
 
New Post
4/10/2011 7:34 AM
 
Sebastian Leupold


Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

www.dnnwerk.de
Joined: 3/8/2004
Posts: 46212
AFAIK modules settings access issue with module edit permission has been re-introduced in 5.6.2, I am not sure, how this happened.
Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
4/10/2011 8:03 AM
 
Costas Zividis


Joined: 10/29/2010
Posts: 546
Hello Sebastian,

Why fixing major bugs is SO HARD with DotNetNuke team ? I just don't get it.

There are a lot of bugs floating around for many versions, some minor some major. I do understand small ones to be neglected but ADMIN OPTIONS SHOWN TO USERS ????

Thanks for the (usual) help and replies you provide !!



Regards from shiny  -and poor- Athens (poor city with rich people that is)

Costas
Discover Venice
 
New Post
4/10/2011 5:38 PM
 
David Lee


David Lee's Avatar

www.nevoweb.com
Joined: 3/29/2005
Posts: 446
Hi Costas,

I've raised this problem on the partners forum, and it's being looked into by DNN corps.

I've heared comments that DNN 5.6.2 will be the last release until v6. I don;t know how true this is. (I can;t even remmeber where I read it now!)...but if it is true then I think it's a mistake...as the only thing that can be said about v5.6.2 is..."it's broken, don;t use it!"

Anyway I hope DNN corps sort it out quick and we get a fix released to the community.

Regards,
Dave
 
New Post
4/10/2011 6:18 PM
 
Costas Zividis


Joined: 10/29/2010
Posts: 546
Hi David,

From what i have been reading in DNN Blog, i think 5.6.2 is the last version before 6. I also agree that it is not good, since updating to version 6 will not be a good idea until 2-3 updates are issued. So most people will be stuck with 5.6.2 and YES 5.6.2 has a lot of problems.

Costas

Discover Venice
 
 Page 1 of 4
1234Next 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Major Security problem reported AGES ago, still in 5.6.2Major Security problem reported AGES ago, still in 5.6.2


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out