search

systemapic / systemapic.js

Systemapic Javascript API
https://systemapic.com
0 stars 3 forks source link

Should not be possible to add user to EDIT access if not editor #166

Closed knutole closed 8 years ago

knutole commented 8 years ago

It's currently possible in GUI to add a user as editor to a project which user does not have edit access to. This should not be possible.

invite_editor

IgorZiegler commented 8 years ago

@knutole if user haven't edit access rights. Could he add a user as viewer?

knutole commented 8 years ago

That depends on if the project is shareable, ie. this key: https://github.com/systemapic/wu/blob/master/models/project.js#L26

Use project.isShareable() to get this key. If project.isShareable() is true, then a VIEWER can invite other VIEWERS.

IgorZiegler commented 8 years ago

@knutole Ok. How could i create a second user? Which script should I use?

IgorZiegler commented 8 years ago

@knutole I have a problem when try reproduce this bug. I have created project, invite a new user to this project as a viewer. sign in as new user. and it is impossible to add my contact as editor or viewer.

knutole commented 8 years ago

Yes, possibly fixed. Will reopen if issue appears again.