A user can edit ANY forum post
- Status
- Closed
- Subject
- A user can edit ANY forum post
- Version
- 1.9.x
- Category
- Error
- Usability
- Feature
- Forum
User Administration (Registration, Login & Banning)
Templates (Smarty) - Resolution status
- Works For Me
- Submitted by
- amette
- Lastmod by
- Marc Laporte
- Rating
- Description
A user with all forum-perms except tiki_p_admin_forum can edit any forum post.
That shouldn't be like that..- Solution
I think, it would be enough to let forum users edit their own posts and allow them to edit all posts, when having tiki_p_admin_forum.
Feel free to make that more granular, if you think, it's appropriate..
IRC-snipped related to this:
IRC Chat 20051011[14:37:17] <sylvieg> some perms are missing around post comment. You can limit forum post but you can't limit the edit/remove of a forum post [14:38:32] <amette> sylvieg : yup, confirmed, opened that yesterday: http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=386 [14:41:47] <sylvieg> amette: if you don't have tiki_p_edit_comments and you are teh user.. you still can edit it [14:42:14] <amette> ah sylvieg - comments, sorry - I was now thinking of forum posts... [14:42:38] <sylvieg> the same
- Importance
- 8
- Easy to solve?
- 8
- Priority
- 64
- Demonstrate Bug (Tiki 19+)
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Version: Create show2.tiki.org instanceAbout show2.tiki.orgTo help developers solve the bug, we kindly request that you demonstrate your bug on a show2.tiki.org instance. To start, simply select a version and click on "Create show2.tiki.org instance". Once the instance is ready (in a minute or two), as indicated in the status window below, you can then access that instance, login (the initial admin username/password is "admin") and configure the Tiki to demonstrate your bug. Priority will be given to bugs that have been demonstrated on show2.tiki.org.
- Ticket ID
- 386
- Created
- Tuesday 11 October, 2005 03:23:42 GMT-0000
by Unknown - LastModif
- Saturday 02 June, 2007 04:42:56 GMT-0000
Attachments
| filename | created | hits | comment | version | filetype | ||
|---|---|---|---|---|---|---|---|
| No attachments for this item | |||||||
;){kind=link}
;){kind=link}
- Feature request: Be able to exclude (by category) the pages listed in Latest Changes module
- Add a command to console.php to invalidate certain objects in the search index
- Counting items in Items List Doesn't Work due to lack of , between items
- Modals in Quartz theme are too narrow
- Tracker Currency Field not working
;){kind=link}
;){kind=link}