mario/rmbug — Issue #43: Files can be accessed by anyone
Author: mario
Created: 2012-01-30 21:11:09+00:00
State: open

Once you upload a file, if you can guess the url, you can access it even if you don't have the permissions.