search

OpenConext-Attic / OpenConext-teams

:warning: Obsolete respository, archive only. Replaced with OpenConext-Teams-NG. :zzz:
https://www.openconext.org
Apache License 2.0
4 stars 6 forks source link

Group consent is never actually checked #25

Closed baszoetekouw closed 7 years ago

baszoetekouw commented 8 years ago

When creating a team, one is suppoed to give consent for sharing group info. However, this "check: seems only to be implemented by making the "create" button active. There is no server side check, so the consent check is easy to circumvent.

One way would be to manually change the DOM structure in the browser. Another one is by triggering an error in teams (for example, by creating a team named <>) and pressing "back" in the browser.

thijskh commented 7 years ago

Solved in OpenConext-Teams-NG.