12 Commits

Author SHA1 Message Date
Ingo Schommer
f7373d1124 Added 2.4.13 changelog 2013-09-26 01:11:59 +02:00
Ingo Schommer
02ede1e811 Added 2.4.12 changelog 2013-09-24 14:28:11 +02:00
Ingo Schommer
797951595b FIX Privilege escalation through Group hierarchy setting (SS-2013-003)
See http://www.silverstripe.org/ss-2013-003-privilege-escalation-through-group-hierarchy-setting/
2013-09-12 15:38:56 +02:00
Ingo Schommer
84a8b21936 Update 2.4.11 changelog 2013-08-07 20:27:18 +02:00
Ingo Schommer
a6a7b01afc Added 2.4 changelog 2013-08-07 15:23:46 +02:00
Hamish Friedlander
8990788818 FIX Prevent DOS by checking for env and admin on ?flush=1 (#1692) 2013-07-19 12:31:37 +12:00
Ingo Schommer
56ad1d027e Updated changelog 2013-02-18 01:03:57 +01:00
Ingo Schommer
50995fbecb BUG Undefined $allowed_actions overrides parent definitions, stricter handling of $allowed_actions on Extension
Controller (and subclasses) failed to enforce $allowed_action restrictions
on parent classes if a child class didn't have it explicitly defined.

Controllers which are extended with $allowed_actions (through an Extension)
now deny access to methods defined on the controller, unless this class also has them in its own
$allowed_actions definition.
2013-02-17 23:16:22 +01:00
Ingo Schommer
3fad49e2c0 2.4.9 changelog 2012-12-04 22:47:47 +01:00
Ingo Schommer
9e595db7f3 Changelogs 2012-10-30 17:00:41 +01:00
Michael Andrewartha
8ad630d5a1 MINOR: formatting changes and fixes to original document formatting 2011-03-21 11:51:50 +13:00
Ingo Schommer
8bd01d62c4 ENHANCEMENT Added sapphire/docs (migrated from https://github.com/chillu/silverstripe-doc-restructuring) 2011-02-07 19:55:13 +13:00