Users can see a "destroy" link for teams they do not own/belong to

codeforboston / cambridge_energy_app

EnerSave is designed to help and encourage Cambridge residents to reduce their electric bills.

https://www.enersaveapp.org/

MIT License

33 stars 25 forks source link

Users can see a "destroy" link for teams they do not own/belong to #274

Closed cranti closed 7 years ago

cranti commented 8 years ago

Clicking on it brings up an "are you sure" pop up, but doesn't actually delete the team -- brings you to a page with "The page you were looking for doesn't exist."

cranti commented 8 years ago

Related: the "show" and "edit" links are also available for teams that I do not own -- they bring me to my user profile page with an "access denied" message

mzagaja commented 7 years ago

This has been resolved.