Non-member circle admins can see the delete button on other circle's album
Open
bug
- Dominant language
- Ruby
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
This issue has no description.
Contributor guide
No contributing guide indexed for this repository
Research direction
No files, tests, or reproduction steps are provided. Start by reproducing the visibility of the delete button for a non-member circle admin, then trace the album authorization path and add a regression test. Done means the button is hidden for albums belonging to other circles while valid admins retain the expected access.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rails, ruby
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100