indieweb / indieweb/wordpress-indieauth
Token Manager only Shows Tokens for Current Logged in User
Open
- Dominant language
- PHP
- Stars
- 36
- Forks
- 14
- Avg merge
- 2h 6m
- Merged PRs (30d)
- 3
Description
This is, to some degree, by design...but should administrators be able to see/revoke tokens of other users?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the Token Manager UI and the code that checks the current user's permissions for viewing and revoking tokens. Clarify whether administrators should be able to perform either action for other users; done requires an agreed permission model and corresponding behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php, wordpress
- Domain
- authentication, authorization
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100