882774 - The user is able to enter a review for an application which has not been purchased.

Status: VERIFIED FIXED

(Marketplace Graveyard :: API, defect, P2)

Description

[Vikas Nanda]

Attachment: the user is able to write a review for a not paid app

Steps to reproduce:

1. Start the application 
2. Search for an application which has not been previously purchased. 
3. write a review and select enter. 
4. Notice the error message "error while submitting a review"

Expected behavior

The user should not be given the option to review an application. 

Observed behavior:

The user is able to submit a review but receives an error message.

Comment 1

[Vikas Nanda]

Attachment: the user is able to write a review for a not paid app

Comment 2

[Matt Basta [:basta]]

The ratings API is returning "user": {"can_rate": true} for paid apps when a user hasn't purchased the app. This seems wrong.

Comment 5

[Allen Short [:ashort]]

http://github.com/mozilla/zamboni/commit/061fc24

Comment 6

[krupa raj[:krupa]]

STR:

1. Tester has not purchased the app
2. Load https://marketplace.allizom.org/app/pricetier4-1/ratings
3. Click on the "2 Reviews" link
4. From the review details page, the user has access to "Write a review" form


Form submission is still unsuccessful

Comment 7

[Allen Short [:ashort]]

this is a fireplace issue, evidently.

Comment 8

[Christopher Van Wiemeersch [:cvan]]

https://github.com/mozilla/fireplace/commit/b384401

Thanks! Giving it back to Allen as he fixed the real bug here.

Comment 9

[sailajan.sabaratnam]

Attachment: user is able to review an application which has not been purchased

Comment 10

[Vikas Nanda]

This issue has now been resolved please see latest screenshot