Add protection for brackets
Closed this issue · 2 comments
A user can currently delete another users bracket. Should a user even be able to view someone else's bracket? What do you think?
The way it is done on almost every site is that you can see other people's brackets after the bracket editing period has ended, and you cannot see anyone else's bracket while you can make your own bracket.
On Mar 9, 2013, at 12:56, Jim Posen notifications@github.com wrote:
A user can currently delete another users bracket. Should a user even be able to view someone else's bracket? What do you think?
—
Reply to this email directly or view it on GitHub.
Interesting. Well, I made a filter called verify_bracket_user, so we can just add that to the show action if we want to. I didn't do that, but it's a simple change.