adobe / adobe/pdf-embed-api-samples
user should be restricted to modify (delete or edit) the comment of other users.- Adobe Embed PDF API
- Dominant language
- JavaScript
- Stars
- 235
- Forks
- 140
- PR merge metrics
- No merged PRs in 30d
Description
### Expected Behaviour
user should be restricted to modify (delete or edit) the comment of other users.
### Actual Behaviour
user can easily manipulate comments of other users.
### Reproduce Scenario (including but not limited to)
#### Steps to Reproduce
1. Click on Add comments from the toolbar
2. Add comment and logout the user
3. Login by different user
4. Logged In user can see edit and delete option for previously added comments from different user.
#### Platform and Version
adobe embed api February, 2023
#### Sample Code that illustrates the problem
#### Logs taken while reproducing problem
Contributor guide
Research direction
The issue identifies the Adobe Embed API toolbar comment controls and provides a two-user reproduction, but names no repository file or test. Start by reproducing the edit and delete behavior with two users, then trace the comment controls and permission handling. Done means a different user cannot edit or delete another user's comment.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100