hypothesis / hypothesis/h

Prevent moderators from editing group title, description and type

Open
#9,142 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
3.2k
Forks
459
Avg merge
27d 1h
Merged PRs (30d)
1

Description

We want a group's moderators to be able to access the group's edit-members page (`/groups/{pubid}/edit/members`) because (once we've implemented https://github.com/hypothesis/h/issues/9136) moderators should be able to use this page to downgrade their own role to member. (Moderators can't change anyone else's role other than their own, but IIRC they _can_ remove plain members from the group.)

But we _don't_ want moderators to be able to edit the group's other settings (name, description, type, etc) on the `/groups/{pubid}/edit` page. Currently moderators _can_ access this page and edit these settings.

Design and implement a way for moderators to have access to the `/groups/{pubid}/edit/members` page but _not_ to the `/groups/{pubid}/edit` (or to have read-only access to the `/groups/{pubid}/edit` page).

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.