User other than author can update an article
dcavanagh opened this issue · 2 comments
dcavanagh commented
Create 2 users
Have one user write an article
have the second user change the body.
sebilasse commented
I agree that in "realworld" this should not happen.
But @dcavanagh : Maybe this issue should be opened in the specification https://github.com/gothinkster/realworld/tree/master/api because it only says :
Update Article
"Authentication required, returns the updated Article" but it SHOULD specify if it forces the creator and updater id to be the same.
TL;DR The spec. is to imprecise regarding this issue
lujakob commented
Thanks @dcavanagh - I guess @sebilasse mentioned the reason why I implemented as is.