Actions
Bug #8559
closed
Profile activity tab access check missing on profile activity display
Description
Normally these access checks are done by their respective types (e.g. GJ activity access is based off the GROUP access NOT profile owner), but this check is missing of raw profile activity. Field activity is checked, but not profile.USER_ID specifically.
Updated by krileon about 3 years ago
- Status changed from Assigned to Resolved
- % Done changed from 50 to 100
Actions