graasp / graasp/graasp-api

WARNING: Invited admins might not be validated

Open
#1,723 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
7
Forks
5
PR merge metrics
No merged PRs in 30d

Description

Users can become non-validated admins by being invited in an item as admin.

Currently it is not a problem, because users always sign up using their emails.
However adding the possibility to signup with a password could lead to non-validated admins.

This is problematic when packed items, memberships returns admin but the backend does not allow operations from non-validated members.

A case that happened to us is an application trying to post app settings as non-validated admin. This case was mostly problematic because the operation was looping.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.