Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

Loading…

Don't show protected posts to owners/instances the authors don't follow #648

Closed
amygdala opened this Issue · 1 comment

3 participants

@ginatrapani ginatrapani was assigned
@ginatrapani ginatrapani referenced this issue from a commit
@ginatrapani ginatrapani Don't show protected posts to owners w/out permission
Users only see posts by protected users they have access to on the source network
Administrators see all posts, even protected ones collected on other users' behalf
This permission check has been implemented on the individual post page and on the replies listing
Still TODO: Update the GridController and ExportController to return PostIterators without private posts owner doesn't have access to
Partially addresses #648
7a992dd
@ginatrapani
Owner

TODO: Modify PostDAO::getRepliesToPostIterator to support post-processing of result set (ie, removing protected posts the owner doesn't have access to).

@anildash anildash referenced this issue from a commit
Commit has since been removed from the repository and is no longer available.
@mwilkie mwilkie was assigned
@mwilkie mwilkie referenced this issue from a commit in mwilkie/thinkup
Mark Wilkie Update Grid Search to respect doesOwnerHaveAccessToPost()
* Update GridController and tests to verify post security for reply searches using OwnerInstanceDAO->doesOwnerHaveAccessToPost()
* Update OwnerInstanceDAO->doesOwnerHaveAccessToPost() and tests to cache query results
Closes #648
87af6b5
@ginatrapani ginatrapani closed this issue from a commit
Mark Wilkie Update Grid Search to respect doesOwnerHaveAccessToPost()
* Update GridController and tests to verify post security for reply searches using OwnerInstanceDAO->doesOwnerHaveAccessToPost()
* Update OwnerInstanceDAO->doesOwnerHaveAccessToPost() and tests to cache query results
Closes #648, closes #1099
b165132
@mwilkie mwilkie was unassigned by amygdala
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.