3 Apr
2000
3 Apr
'00
8:55 p.m.
After changing the permissions, you can only view the REQUEST by using the debug_request method. The only people that can view debug_request would be users logged in with the manager role.
So what's to stop someone from just putting <dtml-var REQUEST> in their own DTMLMethod? -jfarr ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Hi! I'm a signature virus. Copy me into your .sig to join the fun! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~