search

cycleplanet / cycle-planet

Official Cycle Planet repo, an open source and non-profit network of long distance cyclers and those who want to host them.
https://cycleplanet.org/
MIT License
9 stars 4 forks source link

Only original authors should be allowed to edit routes, blog posts or video posts, or comments to them #33

Open reinierl opened 3 years ago

reinierl commented 3 years ago

Currently everyone can according to our security rules.

bidsinga commented 3 years ago

In principle that is the case already. However, I thought it would be useful if editors can do so too, which are people like admins and editors which you can see on this page https://cycleplanet.org/team. Do you think it should work like this?

reinierl commented 3 years ago

That is not the case in principle already until we set up security rules to that extent. Until we do so, anyone can read and write them by bypassing the app and going straight to Firebase.

CyclePlanet team members would always be able to change posts through Google Cloud Console, although that's cumbersome. Ultimately giving them access to an editor on the web would be better but I could live with posts being really really restricted to just the author.

Admins could also circumvent that by making themselves author in Google Cloud Console, then editing as author, and then giving back the posts to its original author.