You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If a user goes to https://www.railsschool.org/polls, they are able to edit all poll questions and publish them. This is a security issue since administrators of the site should be the only ones to be able to edit poll questions.
Expected Outcome: Access should be denied to a regular user. Only admins should be able to edit polls.
Actual Outcome: The poll will be published to the site for all users to see.
The text was updated successfully, but these errors were encountered:
If a user goes to https://www.railsschool.org/polls, they are able to edit all poll questions and publish them. This is a security issue since administrators of the site should be the only ones to be able to edit poll questions.
Bug reproduction steps:
Expected Outcome: Access should be denied to a regular user. Only admins should be able to edit polls.
Actual Outcome: The poll will be published to the site for all users to see.
The text was updated successfully, but these errors were encountered: