Actions
Bug #5353
closedComment access isn't based off the stream owner
Description
Currently comment access is based off the viewing user. This means I can comment on activity of a users profile that I'm not connected with. This should pass the stream owner so the correct access check can be made.
Updated by krileon over 9 years ago
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
This will eventually improve further using CB Privacy to control the access.
Updated by krileon over 9 years ago
It also now accounts for connections being disabled. If disabled it allows all users activity/comment posting access on any profile.
Actions