describe unexpected situation where a logged-in user can delete other comments
parent
4ad3d3a873
commit
7b71cc3636
|
@ -0,0 +1,6 @@
|
||||||
|
[ the precise circumstances around which this can happen are still being nailed down ]
|
||||||
|
|
||||||
|
[[plugins/remove]] says:
|
||||||
|
> Users can only remove things that they are allowed to edit or upload.
|
||||||
|
|
||||||
|
This permits a logged-in user to remove comments by other users, which might be unexpected. *— [[Jon]], 2021-09-30*
|
Loading…
Reference in New Issue