If I visit a pending app as an admin or a reviewer the API currently returns a 403. E.g. https://marketplace-dev.allizom.org/app/spirals (which is currently pending) This is a regression of the current behavior where we allow admins and reviewers to view the page. Similar to `AppOwnerAuthorization` used in `get_and_check_ownership` we could add something to check for admins or reviewers.
Assignee: nobody → robhudson.mozbugs
Target Milestone: --- → 2013-05-23
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.