Do now show 'admin' role for CoG Project Memberships

EarthSystemCoG / COG

COG source code

BSD 3-Clause "New" or "Revised" License

8 stars 16 forks source link

Do now show 'admin' role for CoG Project Memberships #1318

Closed LucaCinquini closed 7 years ago

LucaCinquini commented 7 years ago

Who: NOAA security scan

Currently, the user profile page shows the user roles for each project, such as 'admin' role. This information is sensitive and can be used to obtain privileged accounts.

LucaCinquini commented 7 years ago

Now the CoG project roles are displayed only if the user logged in is the same as the user profile, or the user logged in is a project or site administrator.

murphysj commented 7 years ago

Can't see this action without an IDP but I see the code change.