search

didmar / visible-thoughts-writer

Interface for Visible Thoughts dataset creation
https://visible-thoughts-writer.web.app/
MIT License
0 stars 0 forks source link

Non admin participants should not be able to change roles #12

Closed didmar closed 1 year ago

didmar commented 1 year ago

Describe the bug A run participant who is not the admin can change their or other participants' roles.

Expected behavior Only the admin can change a participant's role. DMs can see the participants' roles through the run settings modal, but not modify it (nor invite someone)

didmar commented 1 year ago

Fixed by 07923e38e6cf12ababa190ca0b9c64c6ba12745c

Only the admin (or a reviewer) can access the run settings modal and therefore change the roles. I don't think read-only access to it is necessary.