mahara-contributors team mailing list archive

[Yuliya Bozhko <1425306@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

To reproduce:

- Create a page
- Submit it to a group
- Check that there is no 'Delete' button on 'Pages' web-page for this page
- Find out page ID (through page view URL)
- Go to YOURSITE/view/delete.php?id=XXX where XXX is page ID
- See that you can easily delete a page

** Affects: mahara
     Importance: Undecided
     Assignee: Yuliya Bozhko (yuliya.bozhko)
         Status: Confirmed

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1425306

Title:
  Users can delete submitted page through URL

Status in Mahara ePortfolio:
  Confirmed

Bug description:
  To reproduce:

  - Create a page
  - Submit it to a group
  - Check that there is no 'Delete' button on 'Pages' web-page for this page
  - Find out page ID (through page view URL)
  - Go to YOURSITE/view/delete.php?id=XXX where XXX is page ID
  - See that you can easily delete a page

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1425306/+subscriptions