Page MenuHome

SVN management page has too broad permissions
Open, Confirmed, HighPublic

Description

For example, sybren@blender.studio has access to https://cloud.blender.org/p/spring/edit/svnman without being part of the project.

The roles & caps of that user are:

Roles:

demo
org-subscriber
subscriber-pro

Capabilities:

attract-use
attract-view
flamenco-use
flamenco-view
flamenco-view-logs
home-project
subscriber
svn-use

Details

Type
Bug

Event Timeline

Sybren A. Stüvel (sybren) lowered the priority of this task from Needs Triage by Developer to Confirmed, High.Apr 20 2018, 11:54 AM
Sybren A. Stüvel (sybren) created this task.