Collection viewers can edit Alerts

XMLWordPrintable

    • Type: Bug Report
    • Resolution: Fixed
    • Priority: L3 - Default
    • 2.7.0
    • Affects Version/s: None
    • Component/s: backend
    • None

      Reproduce:

      • Be a Viewer of a collection
      • use the rest api to edit an existing alert

      Expected:

      • The backend prevents the changes

      Observed:

      • Changes are persisted

      Context:

      When refactoring the EntityList, we accidentally allowed Viewers to edit the Alerts. They were able to save the changes, which should have been prevented by the backend. We fixed it in the frontend, but it should still be possible to edit an alert as viewer via the rest api. Maybe this also affects creation and deletion of alerts

        This is the controller panel for Smart Panels app

              Assignee:
              Unassigned
              Reporter:
              Sebastian Stamm
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: