Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Disallow anonymous API Backend ratings #701

Closed
brylie opened this issue Dec 9, 2015 · 0 comments
Closed

Disallow anonymous API Backend ratings #701

brylie opened this issue Dec 9, 2015 · 0 comments
Assignees
@brylie
Labels
bug
Milestone
Sprint 18

Comments

@brylie
Copy link
Contributor

brylie commented Dec 9, 2015

As part of making our API Catalogue visible to the public, we have discovered that Anonymous users can vote for API Backends. Disable anonymous votes by adding an allow check for Meteor.userId(), and possibly adding a schema to validate API Backend votes.
@brylie brylie self-assigned this Dec 9, 2015
@brylie brylie added this to the Sprint 18 milestone Dec 9, 2015
@55 55 closed this as completed in a97671d Dec 11, 2015
@55 55 removed the in progress label Dec 11, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@brylie brylie

Labels
bug
Projects
None yet
Milestone
Sprint 18
Development

No branches or pull requests
2 participants
@brylie @55