New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Setting an action gives you ownership of a post #209

Closed

antoinejaussoin opened this issue Jan 14, 2021 · 1 comment · Fixed by #210

Owner

antoinejaussoin commented Jan 14, 2021

Bug reported by email:

Hi,

I found a bug in your Retrospected web application.
Problem: You can edit notes created by others (are not belong to you).
Reproduction steps:

Go to board: https://www.retrospected.com/game/xxxxx
Click on the "Set Action" on the note that has been created not by you
Wait few seconds and click on the URL link located on your browser (you can just click anywhere)
Refresh whole page (F5)
Now you are able to edit notes that are not belong to you (Edit button is available)
--
Regards, X

Owner Author

antoinejaussoin commented Jan 14, 2021

Fixed on version 4.0.4

antoinejaussoin closed this as completed

antoinejaussoin linked a pull request

that will close this issue

V410/209/post ownership #210

Merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment