Bug #5353
closed
Comment access isn't based off the stream owner
Added by krileon almost 9 years ago.
Updated almost 9 years ago.
Description
Currently comment access is based off the viewing user. This means I can comment on activity of a users profile that I'm not connected with. This should pass the stream owner so the correct access check can be made.
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
This will eventually improve further using CB Privacy to control the access.
It also now accounts for connections being disabled. If disabled it allows all users activity/comment posting access on any profile.
- Status changed from Resolved to Closed
Also available in: Atom
PDF
Updated by