Actions
Bug #2914
open[Tags] Non-admin users can delete tags created by other users
Status:
New
Priority:
Medium
Assignee:
-
Start date:
12/18/2024
Due date:
% Done:
0%
Estimated time:
Severity:
Major
Description
Environment:
https://qainterrapt.brainster.xyz/login
Browsers:
Google Chrome Version: 131.0.6778.86
Safari Version: 17.6 (19618.3.11.11.5)
Precondition:
The user must be logged into Interrapt
Steps to reproduce:
1. Navigate to the "Tags" section in the menu.
2. Locate a tag created by another user and click the "Delete" button next to it
3. Confirm the delete action in the prompt.
4. Observe that the tag is successfully deleted
Expected result:
Non-admin users should only be able to create, edit and delete their own tags. Tags created by other users should not be deletable by non-admin users.
Actual result:
Non-admin users are able delete tags created by other users, which should only be allowed for admin users.
Files
Actions