Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Possible authorization logic bug in assignments#show #29

Open
s-edwards opened this issue Sep 4, 2013 · 0 comments
Open

Possible authorization logic bug in assignments#show #29

s-edwards opened this issue Sep 4, 2013 · 0 comments
Assignees
Labels

Comments

@s-edwards
Copy link
Member

The assignments#show action requires the current user to have edit access to all offerings of the currrent assignment, or a CanCan exception will be thrown. But what if an instructor for this term's offering of course X is not an instructor for other (older) offerings of course X, and so does not have edit access to assignment offerings under those prior course offerings? This appears to make assignments created by earlier instructors unusable/uneditable by a new instructor?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant