telosnetwork / telos-decide

Telos Decide is a Governance Engine for the Telos Blockchain Network.
https://docs.telos.net/developers/services/telos-decide
MIT License
29 stars 24 forks source link

Anyone can invite anyone (including themselves) to an invite-only treasury #10

Closed villesundell closed 4 years ago

villesundell commented 4 years ago

Describe the bug Anyone can invite anyone to an invite-only treasury, because the account inviting is not verified to be legit participant of the treasury.

Expected behavior Only a member (?) should be able to invite.

Additional context Comment has this issue identified, but not implemented: https://github.com/telosnetwork/telos-decide/blob/b17261e830d2549dfc54e0f9a0e5eb357e5c8a95/contracts/decide/src/voter.cpp#L56

craigbranscom commented 4 years ago

Fixed in #17