Feeds visible in menu when not logged in

Emoncms
,
1

Just upgraded to V11.7.4 and Feeds and Graphs are visible when not logged in.
This was what was shown by going to the dashboards when not logged in

image
image1247×385 15.2 KB

The ‘door’ on the right shows I wasn’t logged in.

The settings have the public profile like this

[public_profile]
; Public profile functionality
; Allows http:; yourdomain.com/[username]/[dash alias] or ?id=[dash id]
; Alternative to http:; yourdomain.com/dashboard/view?id=[dash id]
; Add optional '&embed=1' in the end to remove header and footer
enabled = true
controller = "dashboard"
action = "view"

Double-checked in incognito window and cache refresh.

Because of the (lack of) security I’ve had to set enabled = false but clearly I now don’t get dashboards either.

Any ideas how I can just get dashboards for a non-logged in user?

Thanks
Mike

PHP V7.3
Previous emoncms version 10.2

2

I think this must be a functionality change between V10 and V11.
[I overreacted a bit hinting it was a security issue. :face_with_hand_over_mouth:]

It seems if you tick Hide Menus in the dashboard’s config you won’t see Feeds or Graphs AND unfortunately none of the other dashboards.

Is it possible to have the Dashboards menu WITHOUT the Feeds and Graphs?

Thanks

3

Sorry to keep posting but this IS a security issue.
It seems any non-logged in user can go to Feeds and downsample them.

There’s a warning its permanent

image
image614×554 22 KB

This can’t be right…

Do others see Feeds and Graphs on the dashboard menus when not logged in?

4

Double checked by creating a temporary account on emoncms.org
Feeds are visible and can be downsampled by anybody.

Surely a security/vulnerability issue?
Check here

image
image815×504 32.5 KB