![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 22 years ago
Closed 22 years ago
#559 closed defect (bug)
*Looks* like a user can edit comments he/she shouldn't
| Reported by: | anonymousbugger | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Administration | Version: | |
| Severity: | trivial | Keywords: | |
| Cc: | Focuses: |
Description
User A and User B have the same user_level
User A get get to the edit page for User B's comments (BAD)
BUT User A cannot actually edit the comment (GOOD)
Note also edit_post_link and edit_comment_link appear when they shouldn't
Change History (3)
Note:
See TracTickets
for help on using tickets.
User B can edit User A's posts' comments too, in CVS version, dated 31st Jan.
The edit post link appears on index.php , even though B cannot edit A's posts.