(bug) Owners of a group can edit any users comment in saud group
Summary
If you are the owner of a group, you can EDIT the comment of any user making a comment in said group.
Steps to reproduce
- Browse to a group you are OWNER
- find any comment (not yours) and use the menu to select EDIT
- Clearly see you can edit anothers comment
Debian Stretch 9.9/Firefox 60.7.1
What is the current bug behavior?
You should not be able to edit any other users content.
Relevant logs and/or screenshots
Possible fixes
- Developer
Sorry @MindsGaming, hadn't spotted this one.
@brianhatchet does this fall under the permissions changes we are doing?
- Owner
@markeharding did a hot fix for this and it is no longer possible...i think you may still be able to see the pencil edit icon but it does not save. but yes this will be clarified more in the permissions and access controls epic
- Developer
May be that it is fixed then if I have understood correctly. Or is there still a prevailing bug?