Security patch for Riff Server - Githubissues

rifflearning / zenhub

This is the master repository for the Riff Projects in our ZenHub Workspace

0 stars 0 forks source link

Security patch for Riff Server #251

Open adonahue opened 4 years ago

adonahue commented 4 years ago

This story is for the security patch that was the most critical part of a larger body of work represented in #232. That story will be revised, re-estimated, and prioritized as a remaining piece of work. This story is just to encapsulate the work that has been done and merged.

Acceptance Criteria

[x] Change the API so that records cannot be deleted by any user.
[x] Change the API so that records cannot be altered by any user (except perhaps the necessary alterations of the "meeting" record's participants).

Notes for @mlippert :

Please attach Riff Server PR #21 to this card.
Deploy to Demo to patch our most public facing site.
Include this patch in all future deployments of platform and EDU.
Do not update existing production sites.

adonahue commented 4 years ago

@jordanreedie - can you please add the time you spent on this in the estimate, so we can count it towards velocity?

@juliariffgit