DM icon indicating copy to clipboard operation
DM copied to clipboard

"Empty" projects in production show up publicly for non-shared users

Open SteveMarvin opened this issue 8 years ago • 1 comments

Some projects are publicly visible when they should not be, and do not display content for users that should not be able to see them, but do show the project window and member list.

SteveMarvin avatar Dec 12 '17 18:12 SteveMarvin

If a user has at some point been granted all permissions on a project via the add-admin script, and read permissions have since been revoked for that user, the project will continue to appear in the list when that user opens the projects dropdown; however, the application will fail to load resources for the project if that user opens it. This bug should not effect user accounts on the production instance other than those of developers and testers, since an addition has been made to #163 to prevent users from revoking the superuser's permissions on a project.

akstuhl avatar Dec 12 '17 22:12 akstuhl