Deny write permissions for new unverified users
closes #1300
Testing
This MR is for showing the blue email confirmation banner when a certain exception is thrown from the backend, which only applies to new registered users that haven't verified their emails.
First use an old user (older than the email confirmation task), and you should be able to do all of the following:
- Create a post
- Comment on a post
- Vote up or down
- Create group
- Create blog
- Upload images
- Upload movies
Second, create a new user, don't verify its email address, hide the blue email confirmation banner by clicking on the X icon and try to do the same. Each time you try to do any of those, the blue banner should re-appear
added scoped labels
changed the description
added scoped label and automatically removed label
- Resolved by Marcelo Rivera
- OwnerResolved by Marcelo Rivera
There are a bunch of places that acl write is being used. Lets not duplicate this call unless we have to.
- Last reply by Marcelo Rivera
- OwnerResolved by Marcelo Rivera
What about subscribing and other interact acl actions?
- Last reply by Marcelo Rivera
resolved all threads
added 18 commits
-
334430f8...5c9218c9 - 10 commits from branch
master
- d5dd61e8 - Merge remote-tracking branch 'upstream/master' into feat/unverified-users-permissions
- f67b0efa - (fix): remove acl check from Save as ElggEntity does it already
- dda6687c - (feat): ACL check for wires
- 256e99e1 - (fix): removed acl check from v1/media as it's already done in ElggEntity
- 407ab5a1 - (fix): remove acl->write check from Votes\Manager
- ee1fb98e - (fix): spec tests for SaveSpec
- fbf39026 - (fix): remove ACL->write check from Blogs\Manager as it's done in the entity
- c5ab2c9d - (feat): catch unverified users in comments
Toggle commit list-
334430f8...5c9218c9 - 10 commits from branch
resolved all threads