nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

/Share/Service/Index open to public

iseyfi

We are using Alfresco 3.3. We just realized /share/service/index is open to public. Anyone can get to it. They are able to list, update, download and refresh scripts. This does not seem to be the case with /alfresco/service/index.

Does anyone know if there is a quick workaround to this problem? This also brings another question whether any of the Share web scripts authentications are working.

Find more posts tagged with

Comments

mikeh

It's fixed on 3.3G, to be released this week. Having said that, there's not much of a security risk as all data REST APIs are via the Repository, which ensures the user is correctly authenticated.

Just one clarification: users can't update scripts via the /share/service/index

Thanks,
Mike