Menu

#815 Consistency in checking if user is allowed to add an item

next_release
open
nobody
None
5
2020-08-24
2020-08-24
Steve Short
No

At line 357 in edit_bug.aspx:

if (permission_level == Security.PERMISSION_ALL)
{
    string clone_link = "<a class=warn href=\"javascript:clone()\" "

        + " title='Create a copy of this item'><img src=paste_plain.png border=0 align=top>&nbsp;create copy</a>";
    clone.InnerHtml = clone_link;
}

This code has remained as it is for at least 10 years but I think it's a bug.

Elsewhere the code checks security.user.adds_not_allowed to determine if the user can create or modify an item.

Best regards,
Steve Short

Discussion


Log in to post a comment.

MongoDB Logo MongoDB