I just realize that I can download a dump after finish my login session. Although it's not a security risk, since the downloaded database is empty, is annoying try to work with the blank dump. Would be better if I were redirected to a permission denied page instead.

To reproduce:

  1. Go to /admin/build/dumper page.
  2. In another browser tab/page, finalizes the session by going to /logout.
  3. Back to the Dumper page, and click in the download dump button.
  4. You will get a empty dump.

The bug don't occurs with the download files button.