I can access the Rights config page without logging in!
It shows all usernames for a start, but worst of all it allows me to mess about with the application, surely, this cant just be an oversight, its horrendous.
How can I put this Extension, behind a login, accessible by Admin only.
Sorry if this is a noob question, but I am a noob! Have only been playing with Yii since yesterday.
Impressed so far.
knickers firmly twisted
p