When viewing a page with permission 1 (=read), a "show pagesource" button is displayed. When this button is clicked, a "Permission denied" is shown however.
I expected to be able to view the pagesource. This might be a change in security policy from previous versions, stating that I need higher permissions to view an unrendered version, however then:
1. Dokuwiki could be enhanced to not show the "show pagesource" button
2. The ?do=export_raw function should also be restricted
This behavior is easy to reproduce:
- Visit
http://wiki.splitbrain.org/ without logging in
- Click "Show pagesource"
- Permission is denied; note in contract that
http://wiki.splitbrain.org/?do=export_raw will show the source without providing any credentials