-
Improvement
-
Resolution: Fixed
-
Major
-
3.5.3
-
None
by default all urls under .magnolia are protected by the anonymous role. So it makes sense to move the activation filter under this path.
Note: this is not a security issue as such as the execution under 3.5 uses normal ACLs for writing or deleting
Acceptance criteria
- is related to
-
MAGNOLIA-2021 activation: security hole if you activate a new item
- Closed