pepperstreet VIP
Total posts: 3,834
29 Apr 2017 18:21

Hello, just noticed that a "Guest" can change another user's topic status from "Solved" to "Open". Is this a wanted behavior?

Not logged in, I am a "Guest":

file

Last Modified: 04 May 2017


Sergey
Total posts: 13,743
04 May 2017 14:43

yes it is ok. Since public users can submit topics, no problem they can change status.


pepperstreet VIP
Total posts: 3,834
04 May 2017 14:49

o.k. if it is his own topic... but other registered users topics?!?


Sergey
Total posts: 13,743
04 May 2017 14:54

Unfortunately there is no check forarticle author access level. I can switch to registered but still anyone will be able to change status of anyone's topics.


pepperstreet VIP
Total posts: 3,834
04 May 2017 23:41

Shouldn't it work with:

Field Edit & Submission Access = Public
Who can choose Status = Only Author


A quick test does not give access for Public. Can't even set my own status field. Neither with AJAX, nor on EDIT RECORD. Feels wrong to me.

Powered by Cobalt