MintJoomlaMintJoomla

Forum - Topic status can be changed by Guest

Problem Problem | Reviewed Reviewed | General questions | Hits: 1273 | Comments: 4 | Bookmarked: 0 | Followers: 7

pepperstreet VIP
Total posts: 3,837
29 Apr 2017 18:21

Hello, just noticed that a "Guest" can change another user's topic status from "Solved" to "Open". Is this a wanted behavior?

Not logged in, I am a "Guest":

file

Last Modified: 04 May 2017

Quote

Sergey
Total posts: 13,748
04 May 2017 14:43

yes it is ok. Since public users can submit topics, no problem they can change status.

Quote

pepperstreet VIP
Total posts: 3,837
04 May 2017 14:49

o.k. if it is his own topic... but other registered users topics?!?

Quote

Sergey
Total posts: 13,748
04 May 2017 14:54

Unfortunately there is no check forarticle author access level. I can switch to registered but still anyone will be able to change status of anyone's topics.

Quote

pepperstreet VIP
Total posts: 3,837
04 May 2017 23:41

Shouldn't it work with:

Field Edit & Submission Access = Public
Who can choose Status = Only Author

A quick test does not give access for Public. Can't even set my own status field. Neither with AJAX, nor on EDIT RECORD. Feels wrong to me.

Powered by Cobalt

Login (copy)