-
Type: Bug
-
Status: Closed (View Workflow)
-
Priority: Major
-
Resolution: Won't Fix
-
Affects Version/s: 3.0 Larks
-
Fix Version/s: None
-
Labels:
Steps to reproduce:
- Create branch -> create topic -> create post
- User_1 has "CREATE_POSTS", but doesn't have "VIEW_TOPICS" permissions in branch
- Send 'POST' request for creating 'new post' in topic via 'fiddler' on behalf of User_1
AR: Response from the server: code 403 (no rights)
ER: Code 200 (ok). New post is successfully added
Notes: If you return "VIEW_TOPICS" permissions in branch, 'new post' is appear