mahara-contributors team mailing list archive

[Mahara Bot <1425306@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://reviews.mahara.org/4321
Committed: http://gitorious.org/mahara/mahara/commit/7319e7442d431894460db9e9f904a5ed92c00568
Submitter: Robert Lyon (robertl@xxxxxxxxxxxxxxx)
Branch:    1.8_STABLE

commit 7319e7442d431894460db9e9f904a5ed92c00568
Author: Yuliya Bozhko <yuliya.bozhko@xxxxxxxxxxxxx>
Date:   Wed Feb 25 11:44:54 2015 +1300

Make sure submitted page cannot be deleted via URL (Bug #1425306)

Change-Id: I4536536d254d9dc85c9eb8405bd6ab61c0ae26e9
Signed-off-by: Yuliya Bozhko <yuliya.bozhko@xxxxxxxxxxxxx>

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1425306

Title:
  Users can delete submitted page through URL

Status in Mahara ePortfolio:
  Fix Committed
Status in Mahara 1.10 series:
  Fix Committed
Status in Mahara 1.8 series:
  Fix Committed
Status in Mahara 1.9 series:
  Fix Committed

Bug description:
  To reproduce:

  - Create a page
  - Submit it to a group
  - Check that there is no 'Delete' button on 'Pages' web-page for this page
  - Find out page ID (through page view URL)
  - Go to YOURSITE/view/delete.php?id=XXX where XXX is page ID
  - See that you can easily delete a page

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1425306/+subscriptions