Do not allow unregistered users to edit or delete Routines / Sets

PlayWithMagic / PlayWithMagic.org

PlayWithMagic.org is a web application that catalogs magic tricks and helps magicians build shows.

http://playwithmagic.github.io/PlayWithMagic.org/

Apache License 2.0

2 stars 1 forks source link

Do not allow unregistered users to edit or delete Routines / Sets #212

Closed pkarjala closed 9 years ago

pkarjala commented 9 years ago

Currently they can, and this wipes the database!

marknelsonengineer commented 9 years ago

Patrick... I agree with the theory we discussed after class today. It was a good demonstration of why this feature is important.

pkarjala commented 9 years ago

I'm going to plan on baking this in over the next few days, such that users can only Create and Delete their own content for Routines and Materials (for now), and can only CRUD their own Profiles and Sets

marknelsonengineer commented 9 years ago

Patrick,

What if we remove the ability for any user (even the creator) to remove the routine? Make it an administrative-only function.

Mark

pkarjala commented 9 years ago

I agree that this would be a good idea. We should map out an "administrative backend" for admins to functionally interact with the site.

pkarjala commented 9 years ago