search

liqd / aula

An online platform for political participation in schools in Germany (not in active development)
https://liqd.net
Other
27 stars 5 forks source link

user profile delegation tab shows all delegations in all classes #695

Open fisx opened 8 years ago

fisx commented 8 years ago

if a browsing user has no access to that class, she won't see any ideas there, but delegations. probably not a serious security breach, but we should be clear about this, or change it.

fisx commented 8 years ago

same goes for ideas, btw. need to check that the "authored ideas" tab does not leak any private ideas to users outside the class.

fisx commented 8 years ago

i think this has been resolved.

fisx commented 8 years ago

wait, no, it hasn't.