Stemweb/Stemweb — Issue #8: Inhibit URL-hacking
Author: assamite
Created: 2012-02-15 12:01:35+00:00
State: open
Labels: Security

At the moment you can just copypaste urls to user files and it will let you
download them without logging in and authenticating that you have permission
for them.