Skip to content

fix: prevent users from seeing their own flags#4167

Merged
SychO9 merged 1 commit into2.xfrom
sm/4163
Jan 31, 2025
Merged

fix: prevent users from seeing their own flags#4167
SychO9 merged 1 commit into2.xfrom
sm/4163

Conversation

@SychO9
Copy link
Contributor

@SychO9 SychO9 commented Jan 24, 2025

Fixes #4163

Changes proposed in this pull request:
In 1.x you could not see your own flag, changes made in 2.x have unintentionally made it so that you can. That is because while 1.x allows seeing one's own flags in the API, it explicitly hides them in the UI.

Looking at the git history, the additional "see own flags" query scope seems to have been a mistake addition. Flags were never shown to the flag creator prior to that.

@SychO9 SychO9 requested a review from a team as a code owner January 24, 2025 10:09
@SychO9 SychO9 merged commit cf7ef48 into 2.x Jan 31, 2025
25 checks passed
@SychO9 SychO9 deleted the sm/4163 branch January 31, 2025 08:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[2.0 beta2] Flag permission in user context not working poperly

1 participant