Opened 20 months ago

Closed 19 months ago

Last modified 19 months ago

#3355 closed Bug (fixed)

Email Reports "All websites" includes other users sites

Reported by: nkuttler2 Owned by:
Priority: normal Milestone: 1.8.4 - Piwik 1.8.4
Component: Core Keywords:
Cc: Sensitive: yes

Description

Scheduled reports include stats from sites a user doesn't have any access to in the All Websites section.

I have confirmed this happens with newly created users as well. It also only happens in the scheduled reports, sending them manually does not include the disallowed data.

This is really bad, I had to disable all email reports.

Change History (6)

comment:1 Changed 20 months ago by matt (mattab)

  • Milestone set to 1.8.4 - Piwik 1.8.4

what version of Piwik are you using? please upgade to latest as this bug should be fixed.

comment:2 Changed 20 months ago by nkuttler2

I'm on 1.8.3

comment:3 Changed 20 months ago by matt (mattab)

  • Priority changed from normal to critical
  • Summary changed from Email Reports leak data to Email Reports "All websites" includes other users sites

I could verify the problem and will propose a patch before next release. thanks for the report!

comment:4 Changed 19 months ago by matt (mattab)

  • Resolution set to fixed
  • Status changed from new to closed

(In [6957]) Fixes #3355 Can you please test to apply this patch and confirm if it fixes the issue for you?

comment:5 Changed 19 months ago by nkuttler2

Yes, the patch fixes the issue for me. Thanks!

comment:6 Changed 19 months ago by matt (mattab)

  • Priority changed from critical to normal
Note: See TracTickets for help on using tickets.