Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Get entry only checks if the user created the entry #23

Closed
flamion opened this issue May 22, 2021 · 0 comments · Fixed by #31
Closed

Get entry only checks if the user created the entry #23

flamion opened this issue May 22, 2021 · 0 comments · Fixed by #31
Assignees
@flamion
Labels
bug Something isn't working High Priority High priority fixing needed
Projects
Backend
Milestone
1.0

Comments

@flamion
Copy link
Owner

flamion commented May 22, 2021

If a user wants to access an entry on a board which he didn't create he isn't allowed to. The check if the user has access only checks for direct ownership, not indirect access via a board
@flamion flamion added the bug Something isn't working label May 22, 2021
@flamion flamion added this to the 1.0 milestone May 22, 2021
@flamion flamion self-assigned this May 22, 2021
@flamion flamion added this to Issues in Backend via automation May 22, 2021
@flamion flamion added the High Priority High priority fixing needed label May 22, 2021
@flamion flamion moved this from Issues to Geplant in Backend May 22, 2021
@flamion flamion mentioned this issue May 22, 2021
Merged
Backend automation moved this from Geplant to Done May 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@flamion flamion

Labels
bug Something isn't working High Priority High priority fixing needed
Projects
Backend
Done
Milestone
1.0
Development

Successfully merging a pull request may close this issue.

Merge nightly into master flamion/yap-backend
1 participant
@flamion