When viewing a page with permission 1 (=read), a "show pagesource" button is displayed. When this button is clicked, a "Permission denied" is shown however.
I expected to be able to view the pagesource. This might be a change in security policy from previous versions, stating that I need higher permissions to view an unrendered version, however then:
1. Dokuwiki could be enhanced to not show the "show pagesource" button
2. The ?do=export_raw function should also be restricted
This behavior is easy to reproduce:
- Visit http://wiki.splitbrain.org/
without logging in
- Click "Show pagesource"
- Permission is denied; note in contract that http://wiki.splitbrain.org/?do=export_raw
will show the source without providing any credentials