search

MuckRock / muckrock

MuckRock's source code - Please report bugs, issues and feature requests to info@muckrock.com
https://www.muckrock.com
GNU Affero General Public License v3.0
114 stars 22 forks source link

Anyone can see the edit button for tags and request status #3

Closed allanlasser closed 10 years ago

allanlasser commented 10 years ago

On request pages, the button to edit tags and the request's status is visible even if I'm logged out.

Editing tags should be allowed only for the request creator and staff. Editing status should only be for staff.

mitchelljkotler commented 10 years ago

Editing status has been allowed for the request creator too.

On Wed, Oct 15, 2014 at 4:01 PM, Allan Lasser notifications@github.com wrote:

On request pages, the button to edit tags and the request's status is visible even if I'm logged out.

Editing tags should be allowed only for the request creator and staff. Editing status should only be for staff.

— Reply to this email directly or view it on GitHub https://github.com/MuckRock/muckrock/issues/3.