As a Mentor, I can edit a Vote that I did not create. I have limited fields in edit mode indeed, but I also have a delete button :). Mentors should only be able to edit the Votes they created. Steps to reproduce: 1. Login into the Reps Portal 2. Go to a vote page, for example: https://reps.mozilla.org/v/rep-of-the-month-for-may-1/ 3. Click on the "Edit voting" button Actual Results: 4. Voting Name, Description and Date become editable, and you also get a "Delete voting" button. Expected Results: 4. Only Voting creators should be able to edit the voting.
Right now the voting is designed to be editable by valid_groups. This means that every member of a group assigned to a poll is allowed to edit some of the fields. Since this is the designed workflow of the voting app, I am marking this as INVALID. If you feel this behavior no longer covers the needs of the program, please open another bug with the new specifications regarding the permissions in the voting app.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.