SVN management page has too broad permissions #54740

New Issue

Sybren A. Stüvel · 2018-04-20T11:54:45+02:00

Sybren A. Stüvel commented

2018-04-20 11:54:45 +02:00

For example, sybren@blender.studio has access to https://cloud.blender.org/p/spring/edit/svnman without being part of the project.

The roles & caps of that user are:

Roles:

  demo
  org-subscriber
  subscriber-pro

Capabilities:

  attract-use
  attract-view
  flamenco-use
  flamenco-view
  flamenco-view-logs
  home-project
  subscriber
  svn-use

For example, sybren@blender.studio has access to https://cloud.blender.org/p/spring/edit/svnman without being part of the project. The roles & caps of that user are: Roles: ``` demo org-subscriber subscriber-pro ``` Capabilities: ``` attract-use attract-view flamenco-use flamenco-view flamenco-view-logs home-project subscriber svn-use

Sybren A. Stüvel commented

2018-04-20 11:54:45 +02:00

Added subscribers: @dr.sybren, @fsiddi

Sign in to join this conversation.