user profile delegation tab shows all delegations in all classes

[fisx]

if a browsing user has no access to that class, she won't see any ideas there, but delegations. probably not a serious security breach, but we should be clear about this, or change it.

[fisx]

same goes for ideas, btw. need to check that the "authored ideas" tab does not leak any private ideas to users outside the class.

[fisx]

i think this has been resolved.

[fisx]

wait, no, it hasn't.