topic /Share/Service/Index open to public in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/share-service-index-open-to-public/m-p/239898#M193028 <HTML><HEAD></HEAD><BODY><SPAN>We are using Alfresco 3.3. We just realized /share/service/index is open to public. Anyone can get to it. They are able to list, update, download and refresh scripts. This does not seem to be the case with /alfresco/service/index. </SPAN><BR /><BR /><SPAN>Does anyone know if there is a quick workaround to this problem? This also brings another question whether any of the Share web scripts authentications are working.</SPAN></BODY></HTML> Wed, 09 Jun 2010 19:06:23 GMT iseyfi 2010-06-09T19:06:23Z /Share/Service/Index open to public https://connect.hyland.com/t5/alfresco-archive/share-service-index-open-to-public/m-p/239898#M193028 We are using Alfresco 3.3. We just realized /share/service/index is open to public. Anyone can get to it. They are able to list, update, download and refresh scripts. This does not seem to be the case with /alfresco/service/index. Does anyone know if there is a quick workaround to this problem? This Wed, 09 Jun 2010 19:06:23 GMT https://connect.hyland.com/t5/alfresco-archive/share-service-index-open-to-public/m-p/239898#M193028 iseyfi 2010-06-09T19:06:23Z Re: /Share/Service/Index open to public https://connect.hyland.com/t5/alfresco-archive/share-service-index-open-to-public/m-p/239899#M193029 <HTML><HEAD></HEAD><BODY><SPAN>It's fixed on 3.3G, to be released this week. Having said that, there's not much of a security risk as all data REST APIs are via the Repository, which ensures the user is correctly authenticated.</SPAN><BR /><BR /><SPAN>Just one clarification: users can't update scripts via the /share/service/index</SPAN><BR /><BR /><SPAN>Thanks,</SPAN><BR /><SPAN>Mike</SPAN></BODY></HTML> Wed, 09 Jun 2010 19:22:42 GMT https://connect.hyland.com/t5/alfresco-archive/share-service-index-open-to-public/m-p/239899#M193029 mikeh 2010-06-09T19:22:42Z