describe unexpected situation where a logged-in user can delete other comments

master
jmtd 2021-09-30 09:59:32 -04:00 committed by admin
parent 4ad3d3a873
commit 7b71cc3636
1 changed files with 6 additions and 0 deletions

View File

@ -0,0 +1,6 @@
[ the precise circumstances around which this can happen are still being nailed down ]
[[plugins/remove]] says:
> Users can only remove things that they are allowed to edit or upload.
This permits a logged-in user to remove comments by other users, which might be unexpected. *— [[Jon]], 2021-09-30*