Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Anim not able to modify user except "place" #404

Merged
merged 1 commit into from
Oct 11, 2024

Conversation

Suboyyy
Copy link
Contributor

@Suboyyy Suboyyy commented Oct 11, 2024

Anim not able to modify user except "place"

@DevNono
Copy link
Contributor

DevNono commented Oct 11, 2024

Pour le coup ça s'était un fonctionnement attendu car ce n'est pas le rôle pour moi de l'anim de modifier le nom, prénom ou email d'une personne.

Pour moi, même si c'est peu probable, on est pas à l'abri d'un détournement de compte (changement nom, prénom, email et mdp) pour récup le contrôle d'un compte qui a payé.

Bon après voilà c'est juste mon petit avis sur la question et sur la manière dont on a codé ça avec Teddy l'an dernier donc faites comme vous voulez

@Suboyyy
Copy link
Contributor Author

Suboyyy commented Oct 11, 2024

Bah justement je viens d'enlever le fait qu'ils pouvaient 😅

@DevNono
Copy link
Contributor

DevNono commented Oct 11, 2024

Ah yes j'ai mal lu le code 😂

@Suboyyy Suboyyy merged commit 43e1c48 into dev Oct 11, 2024
3 checks passed
@Suboyyy Suboyyy deleted the security/anim-possible-user-modification branch October 11, 2024 17:34
Suboyyy added a commit that referenced this pull request Oct 13, 2024
* Custom badge commission input (#402)

* commission : input, add permission field

* orga permisison is orgaprice

* fix: permission can know be invite + add ' ' value

* fix: permission as BadgePermission

---------

Co-authored-by: Antoine D <[email protected]>

* security: disable possibility for non-admin users from editing  fields except "place" in user modal (#404)

* feat: trailer added (#405)

Co-authored-by: Antoine D <[email protected]>

---------

Co-authored-by: Antoine D <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants