Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Correct URL ownership issue. #16

Closed
wants to merge 1 commit into from
Closed

Conversation

plablo
Copy link

@plablo plablo commented Jan 24, 2020

It was returning just after testing if the user is an Editor.
Now it checks the ownership of the URL too.

It was returning just after testing if the user is an Editor. 
Now it check the ownership of the URL too.
@plablo
Copy link
Author

plablo commented Jan 24, 2020

Affects Issue #15 .

@madmaharaja
Copy link

Yep, have the same or similar problem:
In my case "editors" can delete or edit links created by other users but not their own links.

@sathish1981
Copy link

@plablo : Your solution works fine. Now the editors and contributors can edit their own links.
But Contributors cannot edit Anon links. so somewhere the access rights for editing anonymous users links was gone.

@sathish1981
Copy link

@plablo @joshp23
After your fix, editor not able to edit contributors link anymore. Please let me know if you can replicate that.

@sathish1981
Copy link

Update,
Actually for Editor, he cannot take any actions on contributor links like edit, delete, share or stats is not working
Like the same, Contributor cannot take any actions on Anon links as well.

As you said in your document, edit and delete for editor to contributors links can be limited but why he cannot share and see stats of it?

In your Document as below,
Editor - Can add (+API), access own and all others', edit & delete own & anon URL's, not tracked on any
Contributor - Can add (+API), access own and anon's, and edit & delete own URLs, not tracked on own

@joshp23
Copy link
Owner

joshp23 commented Mar 7, 2020

I haven't had much time to dig into this, but I suspected this pull request would result in loss of other functions. I have some time this weekend... I hope to explore this issue.

@joshp23
Copy link
Owner

joshp23 commented Mar 8, 2020

@plablo I appreciate your work here. I rewrote that entire function, which was a mess.

@joshp23 joshp23 closed this Mar 8, 2020
@sathish1981
Copy link

@joshp23
Let me test and let u know

@sathish1981
Copy link

@joshp23
I tested your fix. As you stated, Admin and Contributor is working fine but editor has unlimited access.
Editor was having all rights like Admin. He can able to edit and delete all urls.

Somewhere editor role got messed up.

@joshp23
Copy link
Owner

joshp23 commented Mar 19, 2020

editor should be able to edit and delete all urls. that's how I've set up the default. the editor cannot manage plugins, or site settings.

@sathish1981
Copy link

Thanks for the response :) I really appreciate your work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants