Closed rusbrain closed 5 years ago
Any user can edit replay, simply adding /edit to url. This is totally incorrect. User should able to edit only his own replays.
Moderators, Admins => any replay.
I prevented the edit action for any users. Admin Moderators and Own user can edit.
Any user can edit replay, simply adding /edit to url. This is totally incorrect. User should able to edit only his own replays.
Moderators, Admins => any replay.