search

codeuino / social-platform-donut-backend

Donut API:
http://donut-api-prod.codeuino.org/
GNU General Public License v3.0
24 stars 57 forks source link

[BUG] Permission to update and delete the post is given to all #208

Closed kaustubhai closed 3 years ago

kaustubhai commented 3 years ago

Describe the bug Anyone can update and delete the post created by anybody

Steps to Reproduce Steps to reproduce the behaviour:

  1. Create a post from one credential
  2. Try to delete the same post with another credential

Expected behaviour Update and delete permissions should be only with the creator of the post and admins