PDA

View Full Version : User is able to perform actions inside the Remote Directory. - Secure FTP applet


harshal
01-19-2010, 02:18 PM
Hello,

We are experiencing an issue with the Secure FTP applet (which is plugged in to the .NET application) during the upload of a file to the remote system.

Steps for the reproduction of bug :-

1. In the Local System directory tree, select a directory, say “Test Folder”
and transfer to Remote System. Notice the loaded directory "Test Folder" will
be shown in "Remote system" pan, navigate inside it.
2. Now select the "Local System" pan, pick any folder and transfer this folder
to "Test folder" (in the Remote System).
3. In the mean time the transfer is going on click "Cancel" in the "Transfer
Status" dialog and immediately start clicking multiple times the folder icon
for changing directory, displayed in the "Remote System" pan. ( The number of clicks should be very rapid to reproduce this scenario).
4. Observe the error pop up for access denied is displayed, but the entire
directory structure is shown and accessible

We don't expect the applet to browse in the main remote directory's parent directory or any other directories inside the parent directory. We checked that the remote directory's parent permissions are locked but the applet does give the permissions ...

I would any feedbacks on how to resolve this ..

Thanks,
Harshal

mjawwad
01-19-2010, 10:42 PM
I am unable to duplicate this scenario, there is always going to be a delay from when the Cancel button is clicked to the rapid clicking of the directory change label on the remote pan. Even then I'm not sure how rapidly I should click on the directory change label.