New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Hide user votes if actor do not have permissions to see voters #102

Open

rob006 wants to merge 1 commit into FriendsOfFlarum:master from rob006:user-votes-permissions

Contributor

rob006 commented Jan 19, 2023

This was originally reported in #85 (comment)

Voters are also leaking on user profile - you can see posts user voted on even if you don't have permissions to see voters.

For example only me and people with canSeeVoters should see my votes on https://discuss.flarum.org/u/rob006/votes

Confirmed

Frontend changes: tested on a local Flarum installation.
Backend changes: tests are green (run composer test).


          Hide user votes if actor do not have permissions to see voters

7efe7bc

rob006 mentioned this pull request

Remove vote information on user profile to keep them anonymous #108

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment