Email Reports "All websites" includes other users sites
|Reported by:||nkuttler2||Owned by:|
|Priority:||normal||Milestone:||1.8.4 - Piwik 1.8.4|
Scheduled reports include stats from sites a user doesn't have any access to in the All Websites section.
I have confirmed this happens with newly created users as well. It also only happens in the scheduled reports, sending them manually does not include the disallowed data.
This is really bad, I had to disable all email reports.
Change History (6)
comment:3 Changed 18 months ago by matt (mattab)
- Priority changed from normal to critical
- Summary changed from Email Reports leak data to Email Reports "All websites" includes other users sites
comment:4 Changed 18 months ago by matt (mattab)
- Resolution set to fixed
- Status changed from new to closed