Project

General

Profile

Actions

Bug #8559

closed

Profile activity tab access check missing on profile activity display

Added by krileon almost 3 years ago. Updated 8 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
03 June 2021
Due date:
% Done:

100%

Estimated time:

Description

Normally these access checks are done by their respective types (e.g. GJ activity access is based off the GROUP access NOT profile owner), but this check is missing of raw profile activity. Field activity is checked, but not profile.USER_ID specifically.

Actions

Also available in: Atom PDF