search

rusbrain / reps2_beta1

кузы2
http://reps2.ru
GNU General Public License v3.0
11 stars 5 forks source link

Replays: any user can edit #184

Closed rusbrain closed 5 years ago

rusbrain commented 5 years ago

Any user can edit replay, simply adding /edit to url. This is totally incorrect. User should able to edit only his own replays.

Moderators, Admins => any replay.

widedeveloper commented 5 years ago

I prevented the edit action for any users. Admin Moderators and Own user can edit.