-
-
Notifications
You must be signed in to change notification settings - Fork 71
Closed
Labels
area: backendChanges to server-side codeChanges to server-side codecomplexity: unassessedNeeds further developer investigation before complexity/feasibility can be determined.Needs further developer investigation before complexity/feasibility can be determined.priority: high
Description
The Participate ability allows you to comment on your own posts and answers to your own questions, but not more broadly (according to the documentation). Participate Everywhere allows commenting everywhere. However, this restriction isn't working -- a newly-created user with only Participate was able to comment on an existing comment thread, and I just tested in a dev environment and found that such a user can also create new comment threads on other users' posts. It seems we are not enforcing this restriction, and spammers are able to exploit it. (I found out it wasn't working because of a spam flag.)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
area: backendChanges to server-side codeChanges to server-side codecomplexity: unassessedNeeds further developer investigation before complexity/feasibility can be determined.Needs further developer investigation before complexity/feasibility can be determined.priority: high
Type
Projects
Status
Done