|
Friday 06 October 2006 1:41:43 am
Salut (Hi), I created an access to the form with this code (for my anonymous users):
<form method="post" action="/my_site/content/action" name="fullview" style="display:none">
<input type="hidden" name="NodeID" value="88" />
<input type="hidden" name="ClassID" value="20" />
<input type="hidden" name="NewButton"/>
</form>
<a href="#" onclick="goinedition()">link</a>
But, after insertion, another anonymous user can as follows have access to the form of another user, with this link:
http://mysite/content/edit/1676/1
And my client want diffuse a link towards the form and he used this link.
I have affected the rights "create" and "edit" to the user anonymous on the class concerned.
If I withdraw "edit" the user doesn't have access to the form in creation? Can you help me, please ;)
Thank you for your assistance,
Bruno
|