Quiz operations are added without checking access

Created on 25 June 2021, over 3 years ago
Updated 9 August 2024, 3 months ago

Problem/Motivation

Quiz operations are added without checking access. Users that only have permission to manage their own quizzes or quizzes of specific types, and are allowed to "access quiz overview" see the "questions" and "results" operations for quizzes they don't have access to.

πŸ› Bug report
Status

Fixed

Version

7.0

Component

Code - Quiz core

Created by

πŸ‡³πŸ‡±Netherlands casey

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024