[JS2-655] Entity Editor Broken

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.1-dev
• Fix Version/s: 2.1-dev, 2.1
• Component/s: Ajax
• Assignee: David Sean Taylor
• Reporter: David Sean Taylor
• Created: 22/Feb/07 08:15
• Updated: 04/Oct/11 21:37
• Resolved: 22/Feb/07 08:18

Description

Entity Editor has been broken for a long time.
Also, the entity editor is unsecured.
Propose fixing this bug by retrofitting onto a "ajax-direct" pipeline keyed of the /ajax pipeline mapping
Also assign a security behavior to the ajax valve to give it RBAC security, locking out all AJAX calls not authorized by a list of trusted roles