The main issue was that we only checked for the ownership of the todo and did not verify if the user of the to-be-shown/to-be-edited todo is a collaborator.
Added a test for that ☑️
On top of the bug fix, I updated all Gradle versions with ./gradlew wrapper --gradle-version 7.5 as recommended in the docs.
There's no need to update the book as the targeted code parts are not part of our manuscript.
If everything looks fine, you can squash and merge this. Adding "closes #121" to the commit body of the squash will automatically close the corresponding GitHub issue.
See #121.
The main issue was that we only checked for the ownership of the todo and did not verify if the user of the to-be-shown/to-be-edited todo is a collaborator.
Added a test for that ☑️
On top of the bug fix, I updated all Gradle versions with
./gradlew wrapper --gradle-version 7.5as recommended in the docs.There's no need to update the book as the targeted code parts are not part of our manuscript.
If everything looks fine, you can squash and merge this. Adding "closes #121" to the commit body of the squash will automatically close the corresponding GitHub issue.