Maniphest T15207

Legalpad restrictions on this install
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Cigaryno
	Mar 27 2023, 13:10

Tags

Referenced Files

None

Subscribers

Description

There is an open hole for everyone and especially spammers: they can create Legalpad documents. We should restrict the ability to create Legalpad documents to only admins.
We can leave the edit policy for L1 Phorge Vision Statement as is. As for L2 Contributor Agreement (UNDER CONSTRUCTION), it could remain open to Trusted Contributors until it comes into effect.

Related Objects

Mentioned In: Z1: Phorge

Event Timeline

Cigaryno created this task.Mar 27 2023, 13:10

Herald added subscribers: Matthew, chris, speck, tobiaswiese. · View Herald TranscriptMar 27 2023, 13:10

Cigaryno added a project: User-Cigaryno.Mar 28 2023, 08:21

Cigaryno triaged this task as Normal priority.Mar 29 2023, 17:12

avivey added a project: Governance.Apr 5 2023, 11:20

avivey removed a project: phorge.it install (DEPRECATED).Apr 6 2023, 08:41

avivey removed a project: Legalpad.May 9 2023, 10:51

Cigaryno moved this task from Backlog to Phorge.it & Governance on the User-Cigaryno board.Sat, Dec 21, 18:07

Cigaryno updated the task description. (Show Details)Sun, Dec 22, 07:37

Cigaryno edited projects, added phorge.it install; removed Governance.

Cigaryno edited projects, added Governance; removed phorge.it install.

Cigaryno mentioned this in Z1: Phorge.Sun, Dec 22, 09:14

Currently limited to Trusted Contributors, which is enough as these users can be trusted not to break this install.

I've set can create to Trusted Contributors for now. I don't see a problem with people being able to create documents.