Author Topic: Flaw with an objects properties > subscribers  (Read 1354 times)

gman

  • Jr. Member
  • **
  • Posts: 69
    • View Profile
Flaw with an objects properties > subscribers
« on: July 06, 2009, 04:25:39 pm »
There is a flaw with the subscribers property of an object. A normal user can change the properties of an object added/controlled by another user. Also, if someone needs to keep user information anonymous, this is easily broken by using the subscribers to find a list of all users in the system. This lack of anonymity will keep OpenGoo from being usable in situations in which user identity needs to be confidential and the identity of users needs to be kept separate from other users.

 

anything