Page MenuHomePhabricator

Fix policy behavior of "slowvote.info" API method
ClosedPublic

Authored by epriestley on Jul 30 2019, 6:53 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Mar 14, 5:39 PM
Unknown Object (File)
Feb 24 2024, 5:09 PM
Unknown Object (File)
Feb 3 2024, 11:01 PM
Unknown Object (File)
Jan 25 2024, 2:07 AM
Unknown Object (File)
Jan 25 2024, 2:07 AM
Unknown Object (File)
Jan 25 2024, 2:07 AM
Unknown Object (File)
Jan 23 2024, 2:23 AM
Unknown Object (File)
Jan 21 2024, 5:10 PM
Subscribers
None

Details

Summary

Ref T13350. This ancient API method is missing modern policy checks.

Test Plan
  • Set visibility of vote X to "Only: epriestley".
  • Called "slowvote.info" as another user.
  • Before: retrieved poll title and author.
  • After: policy error.
  • Called "slowvote.info" on a visible poll, got information before and after.

Diff Detail

Repository
rP Phabricator
Branch
vote1x
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 23195
Build 31860: Run Core Tests
Build 31859: arc lint + arc unit

Event Timeline

This revision was not accepted when it landed; it landed in state Needs Review.Jul 30 2019, 6:55 PM
epriestley requested review of this revision.
This revision was automatically updated to reflect the committed changes.