Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Users should not have access to other users' private recipes #43

Open
anthonyliuhao opened this issue Nov 27, 2020 · 0 comments
Open

Users should not have access to other users' private recipes #43

anthonyliuhao opened this issue Nov 27, 2020 · 0 comments
Assignees

Comments

@anthonyliuhao
Copy link
Owner

Summary

Users should not have access to other users' private recipes

Steps to reproduce

  1. Register and login
  2. Use the build a recipe feature to create and save a recipe
  3. Go to My Recipes, and then go to the recipe that was just saved
  4. Copy the URL (for example http://localhost:3000/recipe?id=10)
  5. Log out
  6. Manually paste the URL http://localhost:3000/recipe?id=10 into your browser's search bar, and press enter

Observed Result

Even though I have logged out, I can still access the private recipe.

Expected Result

There should be an alert or error to say that I don't have access if I try to view a private recipe of another user.

@anthonyliuhao anthonyliuhao self-assigned this Nov 27, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant