2 Commits

Author	SHA1	Message	Date
Ingo Schommer	56ad1d027e	Updated changelog	2013-02-18 01:03:57 +01:00
Ingo Schommer	50995fbecb	BUG Undefined $allowed_actions overrides parent definitions, stricter handling of $allowed_actions on Extension ... Controller (and subclasses) failed to enforce $allowed_action restrictions on parent classes if a child class didn't have it explicitly defined. Controllers which are extended with $allowed_actions (through an Extension) now deny access to methods defined on the controller, unless this class also has them in its own $allowed_actions definition.	2013-02-17 23:16:22 +01:00