Closed Bug 1279104 Opened 8 years ago Closed 6 years ago

Users should not be able to approve their own approval requests

Categories

(Firefox :: Normandy Server, defect, P2)

Product:
Firefox
Component:
Normandy Server
Type:
defect

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: osmose, Unassigned)

References

Details

A user who creates a new approval request should not be able to approve their own request. This is to prevent the compromise of a single account from compromising Normandy itself by requiring two separate accounts to approve approval requests.
Blocks: 1282505
No longer blocks: 1282505
This was fixed a while ago.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Product: Shield → Firefox
You need to log in before you can comment on or make changes to this bug.