Project

General

Profile

Actions
Copy link

Bug #5353

closed

Comment access isn't based off the stream owner

Bug #5353: Comment access isn't based off the stream owner

Added by krileon over 10 years ago. Updated over 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
krileon
Target version:
3.0.0
Start date:
21 June 2015
Due date:
% Done:

100%

Estimated time:

Description

Currently comment access is based off the viewing user. This means I can comment on activity of a users profile that I'm not connected with. This should pass the stream owner so the correct access check can be made.

Actions
Copy link

Also available in: PDF Atom