Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Kata editor page does not check if logged in user has at least 75 honor #1120

Closed
Voileexperiments opened this issue Sep 7, 2017 · 2 comments
Assignees

Comments

@Voileexperiments
Copy link

Voileexperiments commented Sep 7, 2017

So, someone with as low as 9 honor managed to publish a kata:

https://www.codewars.com/kata/find-the-pivot-element/

image

I investigated into this issue, and immediately found out that https://www.codewars.com/kata/new is not protected at all: users with as low as 2 honor can access this page and create/save/publish katas at will.

@Voileexperiments
Copy link
Author

Bump.

In addition, converting a kumite into a kata seem to work just as fine as well.

@Voileexperiments Voileexperiments changed the title Kata edtior page does not check if logged in user has at least 75 honor Kata editor page does not check if logged in user has at least 75 honor Feb 7, 2018
@jhoffner
Copy link
Member

I've got a fix in preview and will be rolling it out to production today.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants