Skip to content

Unauthorised admin page accesses should not result in page load #476

@maaverik

Description

@maaverik

Describe the bug
If we try opening the admin page of a queue created by another signed-in user, the page opens, although backend info doesn't come through. We shouldn't even show the admin page in cases like this.

To Reproduce
Steps to reproduce the behavior:
Open the admin link of a queue created by a different signed-in user. The page opens up with options even though the member list doesn't load.

Expected behavior
It should clearly say "unauthorized access, please login to continue" or "you're not the owner of this queue".

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions