search

3meters / proxibase

Patchr web service
1 stars 0 forks source link

User was able to join private patch without owner approval #402

Closed Jaymassena closed 8 years ago

Jaymassena commented 8 years ago

Apple reviewer created a new user account name="Jane Smith", and then requested to join the Celebrity Reflection patch (#1 on the explore list). All UI suggests they were "auto-approved". I got a notification that Jane Smith joined my private patch and the private patch is now showing them as a member.

I believe that there is at least one share message in the system that has a share link to this patch and share links to invited users.

georgesnelling commented 8 years ago

Well that's pretty embarrassing. Fixed with a2e7fe3718b03c30ca548caedbfb7bffb187d5c7.

Deployed to production with 3.5.9