[rt-users] Preventing users from viewing other user info

[Beachey, Kendric]

> From: Jesse Vincent
> 
> That sounds like a configuration or cookies problem to me.

Hmm.  Just to see what would happen if I cut out cookies altogether, I fired
up lynx and hit RT with that.  I logged in as mrtest, as before.  It asked
me if I wanted to accept the cookie, and I said no.  I ended up at the Self
Service screen.  So far, so good.  I went and hit the Log Out link.  Again I
rejected the cookie.  Back to the login screen.  Hey!  Could this...?

I logged in again, rejecting the cookie, and got back to the Self Service
screen.  I tried the Create link, rejecting the cookie.  Hey, there's that
login screen again.  Oh.  :-)  I guess that wasn't it.

I tried all this again, but accepted the cookie, and after that, it was just
like hitting it with Mozilla or Konqueror.  Every link brought me straight
back to the same screen.  I had planned to accept the cookie only once, but
after that first time, it never asked again--I guess I was rejecting the
same cookie over and over in the first scenario.

Oh well...

Kendric
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20020114/22bfc21b/attachment.htm>