Symphony.

If an user is logged in as author, the user can acces the template through the ?debug page.

Is this a bug?

If an user is logged in as author, the user can acces the template through the ?debug page.

Anyone with a Symphony account can access this, both authors and developer. In the past I've found it quite useful for authors to be able to send us bug reports, using information from this. They are very tech-savvy authors, but I wouldn't want them to have developer access to the backend.

I have a small admin menu for myself with a ?debug link. But will disable it when the site goes live.

Thanks for the swift answer.

You could only show the debug link for logged in developers. The login info event from the default ensemble adds the author information to the XML which can be used in the templates.

Thanks for that tip Klaftertief