Project

General

Profile

Actions
Copy link

Bug #8559

closed

Profile activity tab access check missing on profile activity display

Added by krileon over 3 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
krileon
Target version:
6.0.0
Start date:
03 June 2021
Due date:
% Done:

100%

Estimated time:

Description

Normally these access checks are done by their respective types (e.g. GJ activity access is based off the GROUP access NOT profile owner), but this check is missing of raw profile activity. Field activity is checked, but not profile.USER_ID specifically.

Actions
Copy link

Also available in: Atom PDF