search

ctftime / ctftime.org

meta repository for ctftime.org issues, feature-requests etc
69 stars 1 forks source link

Can not edit Task added by yourself #414

Open mbiesiad opened 1 month ago

mbiesiad commented 1 month ago

Hi,

Repro steps: Go to CTF event on CTF Time, add Task, add writeup. Try to edit Task description (previously added by yourself) - see "Task was not saved - no access." error.

In case of mistakes it cannot be corrected (this results in incorrect content).

Best regards,

mbiesiad commented 1 month ago

For example here: https://ctftime.org/task/29066 I have added Task, but added draft of writeup by mistake - and now as logged in user I can not change/fix it. Here: https://ctftime.org/writeup/39539 I could fix it (and I have done it), but as I said, there is bug.

Moreover, please notice that it can be consider as security issue, because as now I can not fix (when I still want to do it) mentioned case, someone can paste and send private content - then no option to revert it, it's dangerous - and in the same time it's kind of security issue.

Best regards,