mockdeep / better

Open. Democratic. Project management platform.
bettermeans.com
51 stars 19 forks source link

A user who is not a member of a Project's team has the ability to start a task on that project. #37

Open Collab01 opened 10 years ago

Collab01 commented 10 years ago

On public projects, a user who is not a declared team member of a project can interact with that project with what seems to be the same permissions as a team member. Specifically, the random user can start tasks on the workbench and abandon them. It seems adding a task would be possible. Other functionality has not been tested.

This would seem to be a bug.

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.