Security flaw for autocreate of user
You can access the URL to create new user (/users/new_user) even if the option is deactivated (there is no button but you can type the URL and send a form). Need to change ACL check here !!
You can access the URL to create new user (/users/new_user) even if the option is deactivated (there is no button but you can type the URL and send a form). Need to change ACL check here !!