A user can edit ANY forum post
- Status
- Closed
- Subject
- A user can edit ANY forum post
- Version
- 1.9.x
- Category
- Error
- Usability
- Feature
- Forum
User Administration (Registration, Login & Banning)
Templates (Smarty) - Resolution status
- Works For Me
- Submitted by
- amette
- Lastmod by
- Marc Laporte
- Rating
- Description
A user with all forum-perms except tiki_p_admin_forum can edit any forum post.
That shouldn't be like that..- Solution
I think, it would be enough to let forum users edit their own posts and allow them to edit all posts, when having tiki_p_admin_forum.
Feel free to make that more granular, if you think, it's appropriate..
IRC-snipped related to this:
IRC Chat 20051011Copy to clipboard[14:37:17] <sylvieg> some perms are missing around post comment. You can limit forum post but you can't limit the edit/remove of a forum post [14:38:32] <amette> sylvieg : yup, confirmed, opened that yesterday: http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=386 [14:41:47] <sylvieg> amette: if you don't have tiki_p_edit_comments and you are teh user.. you still can edit it [14:42:14] <amette> ah sylvieg - comments, sorry - I was now thinking of forum posts... [14:42:38] <sylvieg> the same- Importance
- 8
- Easy to solve?
- 8
- Priority
- 64
- Demonstrate Bug on Tiki 19+
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show2.tiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Demonstrate Bug (older Tiki versions)
-
This bug has been demonstrated on show.tikiwiki.org
Please demonstrate your bug on show.tikiwiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show.tikiwiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Ticket ID
- 386
- Created
- Tuesday 11 October, 2005 03:23:42 UTC
by Unknown - LastModif
- Saturday 02 June, 2007 04:42:56 UTC