Loading...
 
Skip to main content

A user can edit ANY forum post

Status
Closed
Subject
A user can edit ANY forum post
Version
1.9.x
Category
  • Error
  • Usability
Feature
Forum
User Administration (Registration, Login & Banning)
Templates (Smarty)
Resolution status
Works For Me
Submitted by
amette
Lastmod by
Marc Laporte
Rating
(0)
Description

A user with all forum-perms except tiki_p_admin_forum can edit any forum post.
That shouldn't be like that..

Solution

I think, it would be enough to let forum users edit their own posts and allow them to edit all posts, when having tiki_p_admin_forum.
Feel free to make that more granular, if you think, it's appropriate..


IRC-snipped related to this:

IRC Chat 20051011
Copy to clipboard
[14:37:17] <sylvieg> some perms are missing around post comment. You can limit forum post but you can't limit the edit/remove of a forum post [14:38:32] <amette> sylvieg : yup, confirmed, opened that yesterday: http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=386 [14:41:47] <sylvieg> amette: if you don't have tiki_p_edit_comments and you are teh user.. you still can edit it [14:42:14] <amette> ah sylvieg - comments, sorry - I was now thinking of forum posts... [14:42:38] <sylvieg> the same
Importance
8
Easy to solve?
8
Priority
64
Demonstrate Bug on Tiki 19+
Please demonstrate your bug on show2.tiki.org
Demonstrate Bug (older Tiki versions)
Ticket ID
386
Created
Tuesday 11 October, 2005 03:23:42 UTC
by Unknown
LastModif
Saturday 02 June, 2007 04:42:56 UTC


Collapse/expand modules below
Show PHP error messages