Closed fatlotus closed 8 years ago
Is there a security flaw? I can login as george.c.teo@gmail.com?
Okay. Check out some of my thoughts.
Oo, nice! Yeah, sorry, that was wayy too much code. From here on out smaller pull requests, promise :)
w.r.t. non-CNetID sellers — I intentionally disabled that feature, since there's no way for them to edit yet. I also want to be careful with any sort of access restriction changes.
(Not sure what to do with Hospital staff :<)
Whats the issue with editing?
I, er, haven't figured out how to let people edit listings yet.
I'm imaging that: ehe edit view could create an UnmoderatedListing, then submit it, get it moderated, then overwrite the old Listing using the same Key — but I haven't gotten that working yet. Or we could email the person, and have them moderate it, since they've now agreed to receive emails. Opinions?
(1) How would the user hold the Key to overwrite the old listing? (2) Email them as in send them a "You have changed your listing to 'foo', please approve this change" message, if approved then maybe back to our moderation queue?
Other than that?
This breaks, er, everything, but I think it also helps reduce overall code complexity. Thoughts on the Mixin pattern? Primary changes:
Don't worry- while you're reviewing, I'll be working on adding more tests :)