• Icon: Bug Report Bug Report
    • Resolution: Fixed
    • Icon: L3 - Default L3 - Default
    • 2.7.0
    • None
    • backend
    • None

      Reproduce:

      • Be a Viewer of a collection
      • use the rest api to edit an existing alert

      Expected:

      • The backend prevents the changes

      Observed:

      • Changes are persisted

      Context:

      When refactoring the EntityList, we accidentally allowed Viewers to edit the Alerts. They were able to save the changes, which should have been prevented by the backend. We fixed it in the frontend, but it should still be possible to edit an alert as viewer via the rest api. Maybe this also affects creation and deletion of alerts

        This is the controller panel for Smart Panels app

            [OPT-2951] Collection viewers can edit Alerts

            Follow up for documentation: OPT-3000

            Helene Waechtler added a comment - Follow up for documentation: OPT-3000

              Unassigned Unassigned
              sebastian.stamm Sebastian Stamm
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: