887565 - Thimble /edit links work for other users

Status: RESOLVED WONTFIX

(Webmaker Graveyard :: Popcorn Maker, defect)

Description

[Jacob [:Jacob]]

This page was made by a different user, but opens for me

https://thimble.webmaker.org/project/1688/edit

Not sure if that's intentional or not, but Popcorn projects don't let you open based off the /edit URL so not sure if Thimble should either.

I guess since it publishes to your own subdomain you can't overwrite another person's project if you get a hold of this type of URL so it's not necessarily a security concern. Just though it was interesting

Comment 1

[Scott [:thecount] Downe]

Yeah, when you go to edit a project you do not own in thimble, it instead remixes it, because it can esily.

Popcorn Maker has a bit of refactoring to do before it can do this too.

I would rather have Popcorn Maker also do this, instead of thimble not doing it.

Comment 2

[Chris DeCairos (:cade)]

(In reply to Scott [:thecount] Downe from comment #1)
> Yeah, when you go to edit a project you do not own in thimble, it instead
> remixes it, because it can esily.

Perhaps Thimble (and Popcorn, when it supports this) could have some indication to the user that they're remixing and not actually editing the source project?

Comment 3

[Jon Buckley [:jbuck]]

Alright, sounds like this is something that we won't fix in Thimble.

:thecount can you file a bug to have /edit URLs work as /remix URLs in Popcorn Maker?