player was able to assign media to stages she didn't have edit access to

upstage-org / upstage

UpStage is a platform for cyberformance: remote players combine digital media in real-time for an online audience. All you need is a web browser!

https://upstage.org.nz

GNU General Public License v3.0

21 stars 0 forks source link

player was able to assign media to stages she didn't have edit access to #1279

Open helenvarley opened 4 months ago

helenvarley commented 4 months ago

one of the students, who has a player account and only edit access to the Demo stage and her own stage, accidentally assigned her media item to all of the stages on upstage.live. this shouldn't be possible - a player should only be able to assign media items to stages that they have edit access to.

webdev604 commented 2 months ago

hi @gloriajw when I logged in with player account, I got all stages. I think I have to get only stages that I have edit access to. can you check?