MintJoomlaMintJoomla

Forum - Topic status can be changed by Guest

Problem Problem | Reviewed Reviewed | General questions | Просмотров: 1314 | Комментарии: 4 | В закладках: 0 | Следят: 7

pepperstreet VIP
Total posts: 3,837
29 Апр 2017 18:21

Hello, just noticed that a "Guest" can change another user's topic status from "Solved" to "Open". Is this a wanted behavior?

Not logged in, I am a "Guest":

file

Последние изменения: 04 Май 2017

Цитата

Sergey
Total posts: 13,748
04 Май 2017 14:43

yes it is ok. Since public users can submit topics, no problem they can change status.

Цитата

pepperstreet VIP
Total posts: 3,837
04 Май 2017 14:49

o.k. if it is his own topic... but other registered users topics?!?

Цитата

Sergey
Total posts: 13,748
04 Май 2017 14:54

Unfortunately there is no check forarticle author access level. I can switch to registered but still anyone will be able to change status of anyone's topics.

Цитата

pepperstreet VIP
Total posts: 3,837
04 Май 2017 23:41

Shouldn't it work with:

Field Edit & Submission Access = Public
Who can choose Status = Only Author

A quick test does not give access for Public. Can't even set my own status field. Neither with AJAX, nor on EDIT RECORD. Feels wrong to me.

Работает на Cobalt