Skip to content

  • Projects
  • Groups
  • Snippets
  • Help
  • Sign in / Register
Minds Backend - Engine
Minds Backend - Engine
  • Project overview
  • Repository
  • Issues 264
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 28
  • CI / CD
  • Security & Compliance
  • Packages
  • Wiki
  • Snippets
  • Members
  • Collapse sidebar
  • Graph
  • Charts
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • Minds
  • Minds Backend - EngineMinds Backend - Engine
  • Issues
  • #1300

Closed
Open
Opened 2 hours ago by Brian Hatchet@brianhatchet:speech_balloon:0 of 8 tasks completed0/8 tasks
Report abuse New issue

When a user has an unverified email address, deny write permissions

When a new user has not verified their email address, any ACL that requires write access should raise a 403 forbidden error

This error message will be used to control user access on the front end and mobile by prompting them to validate their email address

Note, this needs to not effect existing users who have not verified their email address until we can roll out proper messaging

Unverified users should not be able to:

  • Create a post
  • Comment on a post
  • Vote up or down
  • Create group
  • Create blog
  • Upload images
  • Upload movies
  • unit tests

Related issues
2

  • Display email verification message in response to forbidden errors coming from the backend
    front #2428
    Sprint::01/15 - Youthful Yabby
    Avatar for Marcelo Rivera
  • Display email verification message in response to forbidden errors coming from the backend (mobile)
    mobile-native #1702
    Sprint::01/15 - Youthful Yabby
    Jan 28
    Avatar for Juan Manuel Solaro
  • Discussion 0
  • Designs 0
  • Brian Hatchet :speech_balloon: @brianhatchet changed milestone to %Sprint::01/15 - Youthful Yabby 2 hours ago

    changed milestone to %Sprint::01/15 - Youthful Yabby

  • Brian Hatchet :speech_balloon: @brianhatchet added Sprint::01/15 - Youthful Yabby Squad::Blue scoped labels 2 hours ago

    added scoped labels

  • Brian Hatchet :speech_balloon: @brianhatchet changed weight to 6 2 hours ago

    changed weight to 6

  • Brian Hatchet :speech_balloon: @brianhatchet changed time estimate to 6h 2 hours ago

    changed time estimate to 6h

  • Brian Hatchet :speech_balloon: @brianhatchet added to epic &102 1 hour ago

    added to epic &102

  • Brian Hatchet :speech_balloon: @brianhatchet marked this issue as related to front#2428 1 hour ago

    marked this issue as related to front#2428

  • Brian Hatchet :speech_balloon: @brianhatchet marked this issue as related to mobile-native#1702 1 hour ago

    marked this issue as related to mobile-native#1702

Please register or sign in to reply
Assignee
Marcelo Rivera's avatar
Marcelo Rivera @eiennohi
Bot, Spam & Fraud Prevention
Epic
Bot, Spam & Fraud Prevention
Sprint::01/15 - Youthful Yabby
Milestone
Sprint::01/15 - Youthful Yabby
Time tracking
Estimated: 6h
None
Due date
None
2
Labels
Sprint::01/15 - Youthful Yabby Squad::Blue
6
Weight
6
Confidentiality
Not confidential
Lock issue
Unlocked
2
2 participants
user avatar
Marcelo Rivera
user avatar
Brian Hatchet
Reference: minds/engine#1300