Uploaded image for project: 'Survey'
  1. Survey
  2. SURVEY-103

We can access to the survey content even if it is private

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • 2.14.0
    • None
    • None
    • None

      How to reproduce

      • Create a private survey
      • Insert it in a page
      • Go to the page on FO

      Behavior

      • The survey is visible even if we are not connected
      • We can fill and see all questions of the survey
      • It is only on finish survey that the answers are rejected because we are not authorized

          [SURVEY-103] We can access to the survey content even if it is private

          Laurence Aumeunier added a comment - - edited

          It seems we do that to be allowed to store the page in cache.
          Only the cookie can be verified in javascript.
          Why do not send a ajax request to check survey access ?

          Laurence Aumeunier added a comment - - edited It seems we do that to be allowed to store the page in cache. Only the cookie can be verified in javascript. Why do not send a ajax request to check survey access ?

            Unassigned Unassigned
            laurence Laurence Aumeunier
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: