search

MarceauKa / shaark

Self-hosted platform to keep and share your content: web links, posts, passwords and pictures.
582 stars 59 forks source link

Public post can be edited by non-owner #92

Open nickbe opened 4 years ago

nickbe commented 4 years ago

If one user creates a public post, another user is able to set this post to private. I editing another users posts should be prevented (at least if he's not admin)

MarceauKa commented 4 years ago

Is the other user administrator?

nickbe commented 4 years ago

No he wasn't. Both users are non-admins. And the post was public. I think the what we miss here is displaying the post author ( at least optionally) in the post header, and preventing users to change other users posts (at least if those users are not admins)