Details
Description
On the Administration page, the link "Manage Tribes" is visible to all users no matter their privileges. If you click on it, it then prompts for a username / password. If the user doesn't have the privileges to see what's behind the link, they should not see the link either to simplify things. It requires the "Manage Tribes" privilege per the catalina log.
WARN - RequireTag.doStartTag(109) |2010-05-12 10:28:56,644| The user: 'myuser' has attempted to access: module/tribe/tribe.list which requires privilege: Manage Tribes or one of: null or any of null