mahara-contributors team mailing list archive

[Mark Melia <631189@xxxxxxxxxxxxxxxxxx>]

Am I correct in thinking that this problem means that anyone in a group
can login and delete files another person updates it. Also, that there
is an edit option on a file in groups that effectively do nothing. If it
is unchecked for group edit - a member of the group can still edit the
file details and delete the file.

This to me seems like its a significant issue and should be assigned a
higher importance.

-- 
Non-group admin can manage group views and group files
https://bugs.launchpad.net/bugs/631189
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
Maybe its intended, but a group member who is not an admin of that group can add, delete and edit group views and files. 

1.3.0rc1
MySQL
Linux