Project

General

Profile

Actions
Copy link

Bug #2502

open

Tags Can Be Deleted Without Admin Privileges

Added by Onur Tahir over 1 year ago.

Status:
New
Priority:
Medium
Assignee:
Onur Tahir
Start date:
06/12/2024
Due date:
% Done:

0%

Estimated time:

Description

Description
Tags can be deleted without requiring admin privileges. This poses a security risk and may lead to unauthorized modifications of the tagging system.

Steps to Reproduce
1.Log in as a non-admin user.
2.Navigate to the tag page.
3.Select any tag and attempt to delete it.

Expected Result
Non-admin users shoul not be allowed to delet tags and display an appropriate error message that admin privileges are required.

Actual Result
Non-admin users are able to delete tags without any restriction or error message.

Environment
Device: iPhone 14 Max
Browser: Safari (latest version)
Operating System: iOS 16

Files

Can delete tags.mp4 (1.4 MB) Can delete tags.mp4 Onur Tahir, 06/12/2024 08:52 AM

No data to display

Actions
Copy link

Also available in: Atom PDF