Skip to content

Next

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
    • Help
    • Submit feedback
    • Contribute to GitLab
    • Switch to GitLab Next
  • Sign in / Register
Minds
Minds
  • Project
    • Project
    • Details
    • Activity
    • Releases
    • Dependency List
    • Cycle Analytics
    • Insights
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Charts
    • Locked Files
  • Issues 150
    • Issues 150
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 14
    • Merge Requests 14
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
    • Charts
  • Registry
    • Registry
  • Packages
    • Packages
  • Wiki
    • Wiki
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Charts
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • Minds
  • MindsMinds
  • Issues
  • #598

Closed
Open
Opened 11 hours ago by Luculent@luculent
  • Report abuse
  • New issue
Report abuse New issue

(bug) Owners of a group can edit any users comment in saud group

Summary

If you are the owner of a group, you can EDIT the comment of any user making a comment in said group.

Steps to reproduce

  1. Browse to a group you are OWNER
  2. find any comment (not yours) and use the menu to select EDIT
  3. Clearly see you can edit anothers comment

Debian Stretch 9.9/Firefox 60.7.1

What is the current bug behavior?

You should not be able to edit any other users content.

Relevant logs and/or screenshots

Selection_733

Possible fixes

Please solve the reCAPTCHA

We want to be sure it is you, please confirm you are not a robot.

Related issues
0

    • You're only seeing other activity in the feed. To add a comment, switch to one of the following options.
    Please register or sign in to reply
    Assignee
    None
    Assign to
    None
    Epic
    None
    None
    Milestone
    None
    Assign milestone
    None
    Time tracking
    No estimate or time spent
    None
    Due date
    None
    0
    Labels
    None
    Assign labels
    • View project labels
    None
    Weight
    None
    Confidentiality
    Not confidential
    Lock issue
    Unlocked
    1
    1 participant
    user avatar
    Luculent
    Reference: minds/minds#598