The sys/dict/type/all interface is not checked for permission, can be accessed without permission

A user without permission accesses /renren-security-server/sys/dict/type/all

Sensitive information such as dictionary types is leaked