My favorites | Sign in
Logo
New issue | Search
for
This is not phishing, this is art!
Read more here what this is about.
| Advanced search | Search tips
Issue 827: Anonymous users can create comments in diff viewer
1 person starred this issue and may be notified of changes. Back to list
Reported by mkoebele, Jan 22, 2009
*NOTE: Do not post confidential information in this bug report.*

Assuming, you have configured your reviewboard server so that anonymous
users can view reviews and diffs

What steps will reproduce the problem?
1. Go to your reviewboard server and logout should you still be logged in
2. As anonymous user, go to a review and view the diff
3. You now can leave comments to lines of the viewed diff

What is the expected output? What do you see instead?
Since I am logged in as anonymous, I should not be able to create comments.


What operating system are you using? What browser?
Firefox 2&3 on linux and windows.

Please provide any additional information below.
Once you have created comments as anonymous, you can click either on edit
review or publish which will give you the login screen. Once you are logged
in, you are actually still not logged in because if you now view a diff, it
still says "Log-In" in the top right corner instead of your name.
But I think this won't be an issue anymore once anonymous users can't
create comments in the first place.
Comment 1 by chipx86, Jan 23, 2009
(No comment was entered for this change.)
Status: Started
Owner: chipx86
Labels: -Priority-Medium Priority-Critical Milestone-Release1.0 Component-DiffViewer
Comment 2 by chipx86, Jan 23, 2009
Good news is, it just *looks* like the user can create comments. Nothing's actually
being saved in the database. We just need UI to prevent comment creation.
Comment 3 by chipx86, Jan 23, 2009
Fixed in r1696.
Status: Fixed
Sign in to add a comment

Powered by Google Project Hosting