Permalink
Browse files

Change default threshold to view project doc to VIEWER

Previously it was ANYBODY, which would let any user download files from
any project including private ones, even when they are not part of the
team.

Fixes #19873
  • Loading branch information...
dregad committed Jun 24, 2015
1 parent e118f8f commit a4be76d6e5c4939545d84712c79d3f8f4a108c4f
Showing with 5 additions and 1 deletion.
  1. +5 −1 config_defaults_inc.php
View
@@ -2695,9 +2695,13 @@
/**
* Threshold needed to view project documentation
* Note: setting this to ANYBODY will let any user download attachments
* from private projects, regardless of their being a member of it.
* @see $g_enable_project_documentation
* @see $g_upload_project_file_threshold
* @global integer $g_view_proj_doc_threshold
*/
$g_view_proj_doc_threshold = ANYBODY;
$g_view_proj_doc_threshold = VIEWER;
/**
* Site manager

0 comments on commit a4be76d

Please sign in to comment.