Project

General

Profile

Actions
Copy link

Bug #5353

closed

Comment access isn't based off the stream owner

Added by krileon almost 10 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
krileon
Target version:
3.0.0
Start date:
21 June 2015
Due date:
% Done:

100%

Estimated time:

Description

Currently comment access is based off the viewing user. This means I can comment on activity of a users profile that I'm not connected with. This should pass the stream owner so the correct access check can be made.

Actions
Copy link
 #1

Updated by krileon almost 10 years ago

  • Status changed from Assigned to Resolved
  • % Done changed from 0 to 100

This will eventually improve further using CB Privacy to control the access.

Actions
Copy link
 #2

Updated by krileon almost 10 years ago

It also now accounts for connections being disabled. If disabled it allows all users activity/comment posting access on any profile.

Actions
Copy link
 #3

Updated by krileon over 9 years ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF