search

ericmckean / wave-protocol

Automatically exported from code.google.com/p/wave-protocol
0 stars 0 forks source link

Prevent non participants to access waves by URL #231

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Wiab allows to access any wave by it's URL for any logged in user, even if he 
is not participant in this wave. 

What steps will reproduce the problem?
1. Log in as user A and create a new wave.
2. Copy the URL of this wave.
3. Log in as user B, paste the URL into browser address bar and click go.

What is the expected output? What do you see instead?
Expected: The opened wave is empty and the message "No conversations in this 
wave." is displayed.
Actual: The wave is loaded and the content is visible. Attempt to edit causes 
shiny.

Original issue reported on code.google.com by vega113 on 26 Feb 2011 at 11:17

GoogleCodeExporter commented 9 years ago 
Please review patch at http://codereview.waveprotocol.org/550002

Original comment by vega113 on 27 Feb 2011 at 12:15

GoogleCodeExporter commented 9 years ago 
fixed by 5098ac8c7a

Original comment by vega113 on 27 Feb 2011 at 11:28

GoogleCodeExporter commented 9 years ago

Original comment by vega113 on 27 Feb 2011 at 11:28