Bug #5353
closed
Comment access isn't based off the stream owner
Added by krileon almost 10 years ago.
Updated almost 10 years ago.
Description
Currently comment access is based off the viewing user. This means I can comment on activity of a users profile that I'm not connected with. This should pass the stream owner so the correct access check can be made.
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
This will eventually improve further using CB Privacy to control the access.
It also now accounts for connections being disabled. If disabled it allows all users activity/comment posting access on any profile.
- Status changed from Resolved to Closed
Also available in: Atom
PDF
Updated by