How to disable direct access of test case via direct link?

[ericli]

Dear All,

Find a issue that a registered user can access a test case of test project which he is not authorized by using the direct test case access link.

This issue is found in v1.9.3. Once user know the test case direct link of other projects, he can simply access all test suites of this particular test project.

This issue bring us security problem. Can anyone advise how to disable such direct access or alternative solution?

Thanks.

Eric Lee

[fman]

Because this is an issue => please report it on Mantis.
Do some searchs on mantis to understand if this has been solved (i.e. a patch/fix exists)
Meanwhile to disable this only choice is edit code