Subj : Re: What does "Msg Kinds" specify?
To : Andrew Leary
From : Niels Haedecke
Date : Mon Jun 01 2020 06:10 pm
Hi Andrew,
thank you for fixing this issue (and the one regarding the user handle in
From/To fields) so quick! I've already updated my Wintermute BBS to 1.0.7.17
Working perfect so far!
Kind regards,
Niels
Andrew Leary wrote to Niels Haedecke:
AL> Hello Niels!
AL>
AL> 25 May 20 13:44, you wrote to Vincent Coen:
AL>
AL> NH> So as you can see, the user I'm logged in (test) can see that there
AL> NH> are private messages between amiganer and lodger. He can even see the
AL> NH> subject of any private message. This should not be possible. When
AL> NH> querying the local, private echo, user "test" should not see any
AL> NH> messages listed he is neither sender nor recipient of.
AL>
AL> NH> However, when user "test" is then trying to read one of the two
AL> NH> messages he was shown, he gets:
AL>
AL> NH> "This is a private message; only the owner and addressee can view
AL> it."
AL>
AL> NH> So is this the expected behaviour and could this be fixed so you
AL> can't
AL> NH> "spy" on other conversation topics and participants by running the
AL> NH> Quickscan command.
AL>
AL> This bug has been fixed in v1.0.7.16, which was just committed to the
AL> SourceForge Mercurial and Git repositories.
AL>
AL> Thanks for letting me know about the issue.
AL>
AL> Andrew
AL>
AL> --- GoldED+/LNX 1.1.5-b20180707
AL> * Origin: Phoenix BBS * phoenix.bnbbbs.net (1:320/219)
AL>
