Closed Bug 938415 Opened 12 years ago Closed 12 years ago

Admins should be authorized to PUT a review for any user

Categories

(Marketplace Graveyard :: API, defect, P4)

Product:
Marketplace Graveyard
Component:
API
Version:
Avenir
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
VERIFIED FIXED
Milestone:
2013-12-10

People

(Reporter: basta, Assigned: mat)

Details

When an admin PUTs an updated value for a review, it should be allowed. Instead, the API responds with a 403: {"reason": "You do not have permission to update this review."}
Trivial to do once bug 910570 is done
Priority: -- → P4
Assignee: nobody → mpillard
Status: NEW → ASSIGNED
Fixed in https://github.com/mozilla/zamboni/commit/17967829cdf473eaedbc1497c2488aa44c0acc06 STR: - Post a review on an app with a normal user - Log out and back in with a different user that is in the 'Senior App Reviewers', 'Staff' or 'Admins' groups, try editing that review. It should work.
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → 2013-12-10
Verified as fixed : http://screencast.com/t/gnBVQSqSSUK
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.