Sometimes people can see edit pages of events they don't have access to

RESOLVED FIXED

Status

Webmaker
Events
RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: errietta, Assigned: errietta)

Tracking

Details

Attachments

(1 attachment)

(Assignee)

Description

4 years ago
This is a bit of an edge case, but people can see edit pages for events they don't have access to if they go to the edit page without logging in then log in and get redirected at the prompt to do so.

They still can't edit the event, but they can see the edit page.

STR:
Don't be logged in, or log out. Go directly to edit page of an event you don't have access to, e.g. http://localhost:1981/edit/7 then log in when asked to. You will be shown the event edit page.

It should instead show the normal 'Your account does not have permission to edit this event' error.
(Assignee)

Updated

4 years ago
Assignee: nobody → errietta

Updated

4 years ago
Attachment #8491027 - Flags: review?(gavin) → review+
(Assignee)

Updated

4 years ago
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.