#19 Critical: Check that variant belongs to the user trying to save it - Ship Builder

Type	To find
responsible:me	tickets assigned to you
tagged:"@high"	tickets tagged @high
milestone:next	tickets in the upcoming milestone
state:invalid	tickets with the state invalid
created:"last week"	tickets created last week
sort:number, importance, updated	tickets sorted by #, importance or updated
Combine keywords for powerful searching.
Use advanced searching »

#19 ✓resolved

Critical: Check that variant belongs to the user trying to save it

Reported by John Vanderbeck | 2013-08-22 14:25:25 UTC | in Public Beta

Right now any logged in user can view a variant, change it, and save it! Need to verify that the user trying to save the variant matches the user who created it, and only allow it to be updated by the creator!

Comments and changes to this ticket

John Vanderbeck 2013-08-22 15:50:04 UTC
Mostly finished. Just a couple of quirks with the templates I need to work out. Probably have to re-arrange some code from app.js over to the template page.
John Vanderbeck 2013-08-23 04:50:50 UTC
- State changed from “new” to “resolved”

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.