Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Non-owner can add voters to form of other user #81

Closed
PascalinDe opened this issue Jan 18, 2024 · 2 comments · Fixed by #115
Closed

Non-owner can add voters to form of other user #81

PascalinDe opened this issue Jan 18, 2024 · 2 comments · Fixed by #115
Assignees

Comments

@PascalinDe
Copy link
Member

While a non-owner cannot manage other aspects of a form (opening, closing, deleting, ...), they can add voters to the form. Following the logic of not giving them the right to manage the form, they should also not be able to add voters.

@dragonleman @multiscan : unless this is explicitely desired behaviour?

@dragonleman
Copy link

For a form :

  • the owner can manage and add voters
  • a non-owner cannot access the management of the form and therefore cannot add voters

@PascalinDe
Copy link
Member Author

For a form :

* the owner can manage and add voters

* a non-owner cannot access the management of the form and therefore cannot add voters

OK, thanks for confirming, we will fix this then

@PascalinDe PascalinDe assigned PascalinDe and ineiti and unassigned PascalinDe Jan 22, 2024
ineiti added a commit that referenced this issue Feb 15, 2024
Also adds a test in the script directory to make sure this doesn't pass anymore.

Closes #81
ineiti added a commit that referenced this issue Feb 15, 2024
Also adds a test in the script directory to make sure this doesn't pass anymore.

Closes #81
ineiti added a commit that referenced this issue Feb 15, 2024
Also adds a test in the script directory to make sure this doesn't pass anymore.

Closes #81
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

Successfully merging a pull request may close this issue.

3 participants