Project

General

Profile

Actions
Copy link

Bug #1357

open

User can delete Webinar that they did not created

Added by Martina Mitrevska over 2 years ago.

Status:
New
Priority:
Medium
Assignee:
Martina Mitrevska
Start date:
09/15/2023
Due date:
% Done:

0%

Estimated time:

Description

Description:
The Interrapt application allows users to delete webinars. However, there is a critical security issue where users are able to delete webinars that they did not create.

Steps to reproduce:
1. Login on inetrrapt
2. Click on Webinar form the sidebar
3. Delete any webinar that is not created by you

Expected result
The webinar should not be deleted, there should be an option to delete webinar only from the user who created them.
Actual Result
The webinar is deleted.

No data to display

Actions
Copy link

Also available in: Atom PDF