Umbraco Scotland (Glasgow Edition) - August
Details
Our next meetup is back in Glasgow at Factory73 HQ.
Mark McDonald will be presenting "Authenticated Doesn’t Mean Trusted"
A practical security talk about custom Umbraco backoffice functionality. The demo would show how a restricted editor can manipulate requests to access data outside their intended scope when a custom API checks only that they are logged in. It would then rebuild the authorisation model properly and connect the lessons to real Umbraco security advisories.
There will be pizza and refreshments, and off to the pub for drinks after, so make sure to sign up here so we have a good idea of numbers.



