A Bug:
Guests are able to change styles with no permissions by directly going to the URL. For example, if you have unchecked (disabled) Default Style in Style Manager, Guests can switch to it by going to index.php?styleid=1
This happens only when you have Allow Users to change Styles turned ON in Style and Language Settings.
Temporary Solution: Turn off caching of styles.
Can anybody else confirm this bug please??
Thanks
|